https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:12:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-274273 EUVD-2026-274273 https://cve.radiocsirt.org/vuln/euvd-2026-274273 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28434 <p>cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via set_exception_handler(), the library catches the exception and writes its message directly into the HTTP response as a header named EXCEPTION_WHAT. This header is sent to whoever made the request, with no authentication check and no special configuration required to trigger it. The behavior is on by default. A developer who does not know to opt in to set_exception_handler() will ship a server that leaks internal exception messages to any client. This vulnerability is fixed in 0.35.0.</p> <p>cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via set_exception_handler(), the library catches the exception and writes its message directly into the HTTP response as a header named EXCEPTION_WHAT. This header is sent to whoever made the request, with no authentication check and no special configuration required to trigger it. The behavior is on by default. A developer who does not know to opt in to set_exception_handler() will ship a server that leaks internal exception messages to any client. This vulnerability is fixed in 0.35.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28434 https://cve.radiocsirt.org/vuln/oesa-2026-1552 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: cpp-httplib</p> <p>A C++11 single-file header-only cross platform HTTP/HTTPS library. It&amp;amp;apos;s extremely easy to setup. Just include httplib.h file in your code! Security Fix(es):</p> <p>cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via set_exception_handler(), the library catches the exception and writes its message directly into the HTTP response as a header named EXCEPTION_WHAT. This header is sent to whoever made the request, with no authentication check and no special configuration required to trigger it. The behavior is on by default. A developer who does not know to opt in to set_exception_handler() will ship a server that leaks internal exception messages to any client. This vulnerability is fixed in 0.35.0.(CVE-2026-28434)</p> <p>cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, cpp-httplib (httplib.h) does not enforce Server::set_payload_max_length() on the decompressed request body when using HandlerWithContentReader (streaming ContentReader) with Content-Encoding: gzip (or other supported encodings). A small compressed payload can expand beyond the configured payload limit and be processed by the application, enabling a payload size limit bypass and potential denial of service (CPU/memory exhaustion). This vulnerability is fixed in 0.35.0.(CVE-2026-28435)</p> <p>cpp-httplib is a C+…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: cpp-httplib</p> <p>A C++11 single-file header-only cross platform HTTP/HTTPS library. It&amp;amp;apos;s extremely easy to setup. Just include httplib.h file in your code! Security Fix(es):</p> <p>cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via set_exception_handler(), the library catches the exception and writes its message directly into the HTTP response as a header named EXCEPTION_WHAT. This header is sent to whoever made the request, with no authentication check and no special configuration required to trigger it. The behavior is on by default. A developer who does not know to opt in to set_exception_handler() will ship a server that leaks internal exception messages to any client. This vulnerability is fixed in 0.35.0.(CVE-2026-28434)</p> <p>cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, cpp-httplib (httplib.h) does not enforce Server::set_payload_max_length() on the decompressed request body when using HandlerWithContentReader (streaming ContentReader) with Content-Encoding: gzip (or other supported encodings). A small compressed payload can expand beyond the configured payload limit and be processed by the application, enabling a payload size limit bypass and potential denial of service (CPU/memory exhaustion). This vulnerability is fixed in 0.35.0.(CVE-2026-28435)</p> <p>cpp-httplib is a C+…</p> https://cve.radiocsirt.org/vuln/oesa-2026-1552 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10435-1 <p>cpp-httplib-devel-0.38.0-1.1 on GA media</p> <p>cpp-httplib-devel-0.38.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10435-1 https://cve.radiocsirt.org/vuln/suse-su-2026:21599-1 <p>Security update for cpp-httplib</p> <p>Security update for cpp-httplib</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21599-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-28434 <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: cpp-httplib, Ubuntu:Pro:24.04:LTS: cpp-httplib, Ubuntu:25.10: cpp-httplib, Ubuntu:Pro:26.04:LTS: cpp-httplib</p> <p>cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via set_exception_handler(), the library catches the exception and writes its message directly into the HTTP response as a header named EXCEPTION_WHAT. This header is sent to whoever made the request, with no authentication check and no special configuration required to trigger it. The behavior is on by default. A developer who does not know to opt in to set_exception_handler() will ship a server that leaks internal exception messages to any client. This vulnerability is fixed in 0.35.0.</p> <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: cpp-httplib, Ubuntu:Pro:24.04:LTS: cpp-httplib, Ubuntu:25.10: cpp-httplib, Ubuntu:Pro:26.04:LTS: cpp-httplib</p> <p>cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via set_exception_handler(), the library catches the exception and writes its message directly into the HTTP response as a header named EXCEPTION_WHAT. This header is sent to whoever made the request, with no authentication check and no special configuration required to trigger it. The behavior is on by default. A developer who does not know to opt in to set_exception_handler() will ship a server that leaks internal exception messages to any client. This vulnerability is fixed in 0.35.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-28434