{"schema_version":1,"title":"Yhirose Cpp-Httplib vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Yhirose Cpp-Httplib: 0 in the last 7 days and 3 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-77358, was published on 28 August 2026.","url":"https://junglewise.ai/threats/technologies/cpp-httplib","json_url":"https://junglewise.ai/threats/technologies/cpp-httplib.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/cpp-httplib","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":7,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":2,"last_90_days":3,"last_365_days":7},"latest":[{"cve":"CVE-2026-77358","cvss":7.5,"epss":0.0045,"slug":"cve-2026-77358-cpp-httplib-use-after-free-in-tls-websocket-client","title":"cpp-httplib use-after-free in TLS WebSocket client","severity":"info","exploited":false,"published_at":"2026-08-28T00:18:15.79+00:00","url":"https://junglewise.ai/threats/cve-2026-77358-cpp-httplib-use-after-free-in-tls-websocket-client"},{"cve":"CVE-2026-77341","cvss":6.5,"epss":0.0046,"slug":"cve-2026-77341-cpp-httplib-crlf-injection-in-chunked-response-trailers","title":"cpp-httplib CRLF injection in chunked response trailers","severity":"info","exploited":false,"published_at":"2026-08-28T00:18:15.62+00:00","url":"https://junglewise.ai/threats/cve-2026-77341-cpp-httplib-crlf-injection-in-chunked-response-trailers"},{"cve":"CVE-2026-54919","cvss":7.4,"slug":"cve-2026-54919-yhirose-cpp-httplib-certificate-validation-bypass-for-ip-literal","title":"yhirose cpp-httplib certificate validation bypass for IP-literal hosts","severity":"high","exploited":false,"published_at":"2026-07-10T17:16:58.7+00:00","url":"https://junglewise.ai/threats/cve-2026-54919-yhirose-cpp-httplib-certificate-validation-bypass-for-ip-literal"},{"cve":"CVE-2026-46527","cvss":8.7,"slug":"cve-2026-46527-yhirose-cpp-httplib-denial-of-service-via-malformed-x-forwarded","title":"yhirose cpp-httplib denial of service via malformed X-Forwarded-For header","severity":"info","exploited":false,"published_at":"2026-05-29T20:16:28.137+00:00","url":"https://junglewise.ai/threats/cve-2026-46527-yhirose-cpp-httplib-denial-of-service-via-malformed-x-forwarded"},{"cve":"CVE-2026-45372","cvss":9.9,"slug":"cve-2026-45372-yhirose-cpp-httplib-crlf-injection-in-parse-header","title":"yhirose cpp-httplib CRLF injection in parse_header","severity":"critical","exploited":false,"published_at":"2026-05-29T20:16:26.473+00:00","url":"https://junglewise.ai/threats/cve-2026-45372-yhirose-cpp-httplib-crlf-injection-in-parse-header"},{"cve":"CVE-2026-45352","cvss":5.3,"slug":"cve-2026-45352-yhirose-cpp-httplib-denial-of-service-via-negative-chunk-size","title":"yhirose cpp-httplib denial of service via negative chunk-size","severity":"medium","exploited":false,"published_at":"2026-05-29T20:16:26.14+00:00","url":"https://junglewise.ai/threats/cve-2026-45352-yhirose-cpp-httplib-denial-of-service-via-negative-chunk-size"},{"cve":"CVE-2026-34441","cvss":4.8,"epss":0.002,"slug":"cve-2026-34441-yhirose-cpp-httplib-http-request-smuggling-in-static-file-handler","title":"yhirose cpp-httplib HTTP request smuggling in static file handler","severity":"medium","exploited":false,"published_at":"2026-03-31T22:16:19.177+00:00","url":"https://junglewise.ai/threats/cve-2026-34441-yhirose-cpp-httplib-http-request-smuggling-in-static-file-handler"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Yhirose Cpp-Httplib","slug":"cpp-httplib","vendor":{"name":"Yhirose","slug":"yhirose","url":"https://junglewise.ai/threats/vendors/yhirose"},"aliases":[],"category":"library","homepage":"https://github.com/yhirose/cpp-httplib","repo_url":"https://github.com/yhirose/cpp-httplib","description":"A C++11 single-file header-only cross-platform HTTP/HTTPS library.","url":"https://junglewise.ai/threats/technologies/cpp-httplib"},"most_severe":[{"cve":"CVE-2026-45372","cvss":9.9,"slug":"cve-2026-45372-yhirose-cpp-httplib-crlf-injection-in-parse-header","title":"yhirose cpp-httplib CRLF injection in parse_header","severity":"critical","exploited":false,"published_at":"2026-05-29T20:16:26.473+00:00","url":"https://junglewise.ai/threats/cve-2026-45372-yhirose-cpp-httplib-crlf-injection-in-parse-header"},{"cve":"CVE-2026-54919","cvss":7.4,"slug":"cve-2026-54919-yhirose-cpp-httplib-certificate-validation-bypass-for-ip-literal","title":"yhirose cpp-httplib certificate validation bypass for IP-literal hosts","severity":"high","exploited":false,"published_at":"2026-07-10T17:16:58.7+00:00","url":"https://junglewise.ai/threats/cve-2026-54919-yhirose-cpp-httplib-certificate-validation-bypass-for-ip-literal"},{"cve":"CVE-2026-45352","cvss":5.3,"slug":"cve-2026-45352-yhirose-cpp-httplib-denial-of-service-via-negative-chunk-size","title":"yhirose cpp-httplib denial of service via negative chunk-size","severity":"medium","exploited":false,"published_at":"2026-05-29T20:16:26.14+00:00","url":"https://junglewise.ai/threats/cve-2026-45352-yhirose-cpp-httplib-denial-of-service-via-negative-chunk-size"},{"cve":"CVE-2026-34441","cvss":4.8,"epss":0.002,"slug":"cve-2026-34441-yhirose-cpp-httplib-http-request-smuggling-in-static-file-handler","title":"yhirose cpp-httplib HTTP request smuggling in static file handler","severity":"medium","exploited":false,"published_at":"2026-03-31T22:16:19.177+00:00","url":"https://junglewise.ai/threats/cve-2026-34441-yhirose-cpp-httplib-http-request-smuggling-in-static-file-handler"},{"cve":"CVE-2026-46527","cvss":8.7,"slug":"cve-2026-46527-yhirose-cpp-httplib-denial-of-service-via-malformed-x-forwarded","title":"yhirose cpp-httplib denial of service via malformed X-Forwarded-For header","severity":"info","exploited":false,"published_at":"2026-05-29T20:16:28.137+00:00","url":"https://junglewise.ai/threats/cve-2026-46527-yhirose-cpp-httplib-denial-of-service-via-malformed-x-forwarded"},{"cve":"CVE-2026-77358","cvss":7.5,"epss":0.0045,"slug":"cve-2026-77358-cpp-httplib-use-after-free-in-tls-websocket-client","title":"cpp-httplib use-after-free in TLS WebSocket client","severity":"info","exploited":false,"published_at":"2026-08-28T00:18:15.79+00:00","url":"https://junglewise.ai/threats/cve-2026-77358-cpp-httplib-use-after-free-in-tls-websocket-client"},{"cve":"CVE-2026-77341","cvss":6.5,"epss":0.0046,"slug":"cve-2026-77341-cpp-httplib-crlf-injection-in-chunked-response-trailers","title":"cpp-httplib CRLF injection in chunked response trailers","severity":"info","exploited":false,"published_at":"2026-08-28T00:18:15.62+00:00","url":"https://junglewise.ai/threats/cve-2026-77341-cpp-httplib-crlf-injection-in-chunked-response-trailers"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}