Skip to content
OpenAdvisories
Critical USN-7962-1 1 CVE

cpp-httplib vulnerability

Published Jan 14, 2026 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that cpp-httplib did not correctly handle HTTP headers.
A remote attacker could possibly use this issue to bypass authorization
and impersonate users.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 25.10 cpp-httplib 0.18.7-1ubuntu0.25.10.1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS cpp-httplib 0.10.3+ds-1ubuntu0.1~esm1
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS cpp-httplib 0.14.3+ds-1.1ubuntu0.1~esm1

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-66570

    cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

    cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject heade…

    yhirose cpp-httplib cpp-httplib cpp-httplib Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2025-66570