Vulnerabilidades do CrowCpp Crow
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam CrowCpp Crow: 2 registro(s), com versões afetadas e correções.
CVE-2026-116011
Alta · 7.5
CWE-674 24/10/2026
Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()
Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of nested objects to exhaust the worker thread stack, terminating the process and dropping all connections.
CVE-2023-26142
Média · 6.1
CWE-74 12/09/2023
All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user...
All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values. Header values are not properly sanitized against CRLF Injection in the set_header and add_header functions. An attacker can add the \r\n (carriage return line feeds) characters to end the HTTP response headers and inject malicious content.