Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-53629

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the header can allocate memory arbitrarily in the server, potentially leading to its exhaustion. This vulnerability is fixed in 0.23.0. NOTE: This vulnerability is related to CVE-2025-53628.

Published

2025-07-10T20:15:27.370

Last Modified

2025-08-06T18:09:49.790

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses

Type: Secondary
CWE-770

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	yhirose	cpp-httplib	< 0.23.0	Yes

References

https://github.com/yhirose/cpp-httplib/commit/17ba303889b8d4d719be3879a70639ab653efb99 Patch ([email protected])
https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-j6p8-779x-p5pw Not Applicable ([email protected])
https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-qjmq-h3cc-qv6w Exploit, Vendor Advisory ([email protected])
https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-qjmq-h3cc-qv6w Exploit, Vendor Advisory (134c704f-9b21-4f2e-91b3-4a467353bcc0)