Approved changes feed: RSS · Atom
cpe:2.3:a:ithewei:libhv:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ithewei (f9b0e1ea-6659-58e7-a1f2-0800069876fb) |
|---|---|
| Product | Libhv (dd5c1693-a7c4-5f37-9f28-1af031df99ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitee/ithewei/libhv |
purl2cpe | 2026-06-01 10:14:02.812769 |
pkg:github/ithewei/libhv |
purl2cpe | 2026-06-01 10:14:02.812771 |
pkg:golang/github.com/ithewei/libhv |
purl2cpe | 2026-06-01 10:14:02.812772 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-1867 |
vulnerable | 2026-06-08 07:08:38.383384 |
HTTP Response Smuggling Vulnerability in libhv
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue affects libhv: through 1.3.3.
Published: 2025-03-03T08:48:56.284Z
Updated: 2025-03-03T16:32:50.538Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26148 |
vulnerable | 2026-06-08 05:57:38.725311 |
Details available
MEDIUM (5.4)
All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n (carriage return line feeds) characters and inject additional headers in the request sent.
Published: 2023-09-29T05:00:03.203Z
Updated: 2024-09-23T18:39:31.832Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26147 |
vulnerable | 2026-06-08 05:57:38.724799 |
Details available
MEDIUM (5.3)
All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values. An attacker can add the \r\n (carriage return line feeds) characters to end the HTTP response headers and inject malicious content, like for example additional headers or new response body, leading to a potential XSS vulnerability.
Published: 2023-09-29T05:00:04.105Z
Updated: 2024-09-23T18:38:45.605Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26146 |
vulnerable | 2026-06-08 05:57:38.724317 |
Details available
MEDIUM (6.1)
All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is served by the application, the filename is displayed without proper sanitization when it is rendered.
Published: 2023-09-29T05:00:01.401Z
Updated: 2024-09-23T16:30:04.213Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.