CVE-2025-53628

HIGH 8.8CVE-2025-53628 · Published 10/07/2025 · updated 17/06/2026

In short

CVE-2025-53628 is a HIGH (CVSS 8.8) vulnerability affecting cpp-httplib (yhirose).
Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.5% of all vulnerabilities.
Fix: update to 0.20.1 or later.

Package	Affected versions	Patched versions
cpp-httplib yhirose	`< 0.20.1`	`0.20.1`

Description

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.20.1, cpp-httplib does not have a limit for a unique line, permitting an attacker to explore this to allocate memory arbitrarily. This vulnerability is fixed in 0.20.1. NOTE: This vulnerability is related to CVE-2025-53629.

References

yhirose/cpp-httplib commit 7b75210 · Patch
yhirose/cpp-httplib security advisory · Exploit
yhirose/cpp-httplib security advisory · Not Applicable

More vulnerabilities in cpp-httplib

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cpp-httplib

yhirose

< 0.20.1

0.20.1

Description

More vulnerabilities in cpp-httplib

See all →