Ithewei/Libhv

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:ithewei/libhv:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductIthewei/Libhv (3500e30f-de00-5280-949a-f11d92c10f39)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26148 vulnerable 2026-06-08 05:57:38.725159 Details available
MEDIUM (5.4)
All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n (carriage return line feeds) characters and inject additional headers in the request sent.
Published: 2023-09-29T05:00:03.203Z
Updated: 2024-09-23T18:39:31.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26147 vulnerable 2026-06-08 05:57:38.724760 Details available
MEDIUM (5.3)
All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values. An attacker can add the \r\n (carriage return line feeds) characters to end the HTTP response headers and inject malicious content, like for example additional headers or new response body, leading to a potential XSS vulnerability.
Published: 2023-09-29T05:00:04.105Z
Updated: 2024-09-23T18:38:45.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26146 vulnerable 2026-06-08 05:57:38.723516 Details available
MEDIUM (6.1)
All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is served by the application, the filename is displayed without proper sanitization when it is rendered.
Published: 2023-09-29T05:00:01.401Z
Updated: 2024-09-23T16:30:04.213Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.