Debian/cpp-httplib: high 7.5
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, cpp-httplib (httplib.h) does not enforce Server::set_payload_max_length() on the decompressed request
Action: Upgrade cpp-httplib to 0.41.0+ds-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.41.0+ds-3 | - |
Fixed versions
| 0.41.0+ds-3 |
Sources
- osv: DEBIAN-CVE-2026-28435#Debian:14/cpp-httplib
- https://security-tracker.debian.org/tracker/CVE-2026-28435
published · modified · JSON