There is 1 open security issue in bookworm.
1 issue left for the package maintainer to handle:
- CVE-2025-0825:
(needs triaging)
cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more.
You can find information about how to handle this issue in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/c/cpp-httplib.png){kind=link}