Skip to content
OpenAdvisories

Vendor

tiny-http

2 known vulnerabilities.

Products

tiny-http 2
All Critical High Medium Low Exploited only

2 results · Feed

  • Low 3.7
    CVE-2026-66753

    tiny-http 0.12.0 HTTP Response Splitting via Header Injection

    tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers to inject carriage return (0x0D) and line feed (0x0A) bytes into HTTP header values on both request and response sides due to insufficient validation in header pars…

    tiny-http tiny-http rust-tiny-http rust-tiny-http Debian Ubuntu
  • Medium 5.4
    CVE-2026-66752

    tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling

    tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditio…

    tiny-http tiny-http rust-tiny-http rust-tiny-http Debian Ubuntu