CR
Product
Crow
by CrowCpp · last CVE Oct 24, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 3Medium 2Low 0
Watch

Add Crow to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-38667
9.8
3%
Aug 22
HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used
Affected: through 1.0\+4
CVE-2022-34970
9.8
4%
Aug 4
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h
Affected: before 1.0\+4
CVE-2026-116011
New
7.5
1%
Oct 24
Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()
Affected: before 1.3.4
CVE-2022-38668
7.5
1%
Aug 22
HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller…
Affected: 1.0+4
CVE-2021-23514
7.5
2%
Jan 13
This affects the package Crow before 0.3+4
Affected: before 0.3\+4
CVE-2023-26142
6.1
1%
Sep 12
All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values
Affected: before 1.3.2
CVE-2021-23824
6.1
1%
Jan 13
This affects the package Crow before 0.3+4
Affected: before 0.3\+4
Showing 7