Skip to content
Sign in
5.4 Medium

CVE-2023-26148 All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set…

Description

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n (carriage return line feeds) characters and inject additional headers in the request sent.

Affected products and versions

Product Affected versions Fixed in
ithewei/libhv Versions not published

Other CVEs of ithewei/libhv

The 3 CVEs of ithewei/libhv →
CVE-2023-26147 All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to… 5.3 Medium CVE-2023-26146 All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name… 6.1 Medium
Track this CVE