Ithewei - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2025-03-03.

Products

• Libhv - 3 CVEs

Newest CVEs of Ithewei

• CVE-2025-1867 - CVSS 10 (critical), 2025-03-03: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue…
• CVE-2023-26148 - CVSS 5.4 (medium), 2023-09-29: All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the…
• CVE-2023-26147 - CVSS 6.1 (medium), 2023-09-29: All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values. An attacker can…
• CVE-2023-26146 - CVSS 6.1 (medium), 2023-09-29: All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is…