CVE-2025-0825

MEDIUM 5.3CVE-2025-0825 · Published 04/02/2025 · updated 17/06/2026

In short

CVE-2025-0825 is a MEDIUM (CVSS 5.3) vulnerability affecting cpp-httplib (yhirose).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.1% of all vulnerabilities.
Fix: update to 0.18.4 or later.

Package	Affected versions	Patched versions
cpp-httplib yhirose	`≥ 0.17.3, < 0.18.4`	`0.18.4`

Description

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more.

References

advisory.checkmarx.net/advisory/CVE-2025-0825 · Exploit
yhirose/cpp-httplib commit 9c36aae · Patch

More vulnerabilities in cpp-httplib

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cpp-httplib

yhirose

≥ 0.17.3, < 0.18.4

0.18.4

More vulnerabilities in cpp-httplib

See all →