Description
CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.
Critical · 9.8
CVE-2026-38967
EUVD-2026-34020GHSA-jjvh-j394-wqm7
CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.
Published Jun 2, 2026 · Updated Jun 3, 2026 · Assigned by mitre