Ithewei Libhv
4 CVEs affecting Ithewei Libhv. Latest disclosed: 2025-03-03. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-26146 | Medium | 6.1 | 2023-09-29 | All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is serv… |
CVE-2023-26148 | Medium | 5.4 | 2023-09-29 | All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r… |
CVE-2023-26147 | Medium | 5.3 | 2023-09-29 | All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values. An attacker can… |
CVE-2025-1867 | | 2025-03-03 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue affec… |