目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

yhirose 厂商漏洞列表 / CVE 中文分析 19

yhirose 厂商相关 19 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

该厂商专注于开发开源HTTP客户端库，广泛应用于网络请求处理。历史漏洞记录显示其产品曾存在远程代码执行、跨站脚本请求伪造及权限绕过等问题。截至最新统计，已发现15条CVE编号漏洞，主要集中在输入验证不足和内存管理缺陷。安全社区建议开发者及时更新版本，并对用户输入实施严格过滤以防范潜在攻击。

件 19 件の結果 / 19フィルターをクリア
上位製品 yhirose: cpp-httplib
CVE IDタイトルCVSS深刻度公開日
CVE-2026-54919 cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends — cpp-httplibCWE-295 7.4 High2026-07-10
CVE-2026-45372 cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection — cpp-httplibCWE-93 9.9 Critical2026-05-29
CVE-2026-46527 cpp-httplib: Malicious `X-Forwarded-For` Under Trusted-Proxy Configuration Triggers Empty `vector::front()`, Leading to Undefined Behavior and Server Crash — cpp-httplibCWE-476--2026-05-29
CVE-2026-45352 cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding — cpp-httplibCWE-20 5.3 Medium2026-05-29
CVE-2026-34441 cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body — cpp-httplibCWE-444 4.8 Medium2026-03-31
CVE-2026-33745 cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect — cpp-httplibCWE-200 7.4 High2026-03-27
CVE-2026-32627 cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy — cpp-httplibCWE-295 8.7 High2026-03-13
CVE-2026-31870 cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header — cpp-httplibCWE-248 7.5 High2026-03-11
CVE-2026-29076 cpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsing — cpp-httplibCWE-674 5.9 Medium2026-03-07
CVE-2026-28435 Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplib — cpp-httplibCWE-400 7.5 High2026-03-04
CVE-2026-28434 cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header — cpp-httplibCWE-200 5.3 Medium2026-03-04
CVE-2026-22776 cpp-httplib vulnerable to a denial of service (DOS) using a zip bomb — cpp-httplibCWE-409 7.5AIHighAI2026-01-12
CVE-2026-21428 cpp-httplib has CRLF injection in http headers — cpp-httplibCWE-93 9.1 -2026-01-01
CVE-2025-66577 cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust — cpp-httplibCWE-117 5.3 Medium2025-12-05
CVE-2025-66570 cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*) — cpp-httplibCWE-290 10.0 Critical2025-12-05
CVE-2025-53629 cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability — cpp-httplibCWE-770 7.5 High2025-07-10
CVE-2025-53628 cpp-httplib does not limit the length of a line — cpp-httplibCWE-835 7.5AIHighAI2025-07-10
CVE-2025-52887 cpp-httplib has unlimited number of http header fields, which causes memory leak — cpp-httplibCWE-400 7.5 High2025-06-26
CVE-2025-46728 cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length Requests — cpp-httplibCWE-400 7.5 High2025-05-06

本页汇总了 yhirose 厂商截至目前公开的全部 19 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。