CVE-2023-26130

HIGH 8.8CVE-2023-26130 · Published 30/05/2023 · updated 17/06/2026

In short

CVE-2023-26130 is a HIGH (CVSS 8.8) vulnerability affecting cpp-httplib (cpp-httplib project).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.7% of all vulnerabilities.
Fix: update to 0.12.4 or later.

Package	Affected versions	Patched versions
cpp-httplib cpp-httplib_project	`< 0.12.4`	`0.12.4`

Description

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. **Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).

References

More vulnerabilities in cpp-httplib

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free