Veille CVE

Recherche « CrowCpp Crow »

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « CrowCpp Crow » ✕
  1. CVE-2026-116011 7.5 Élevée

    CrowCpp Crow

    Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of nested objects to exhaust the worker thread stack, terminating the process and dropping all connections.

  2. CVE-2026-38967 9.8 Critique

    CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.