Skip to content
OpenAdvisories

Package · Debian

rust-tiny-http

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-66753 Public exploit

    tiny-http 0.12.0 HTTP Response Splitting via Header Injection

    tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers to inject carriage return (0x0D) and line feed (0x0A) bytes into HTTP header values on both request and response sides due to insufficient validation in header pars…

    tiny-http tiny-http rust-tiny-http rust-tiny-http Debian Ubuntu