{
  "id": "openEuler-SA-2023-1365",
  "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1365",
  "title": "An update for cpp-httplib is now available for openEuler-22.03-LTS",
  "severity": "High",
  "description": "A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code\r\n\r\nSecurity Fix(es):\r\n\r\nVersions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors.\r\n\r\n**Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).(CVE-2023-26130)",
  "cves": [
    {
      "id": "CVE-2023-26130",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-26130",
      "severity": "High"
    }
  ]
}