CR
Product
Crow
7
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 3Medium 2Low 0
Watch
Add Crow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-38667 | 9.8 | Aug 22 | HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used Affected: through 1.0\+4 |
| CVE-2022-34970 | 9.8 | Aug 4 | Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h Affected: before 1.0\+4 |
| CVE-2026-116011 New | 7.5 | Oct 24 | Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load() Affected: before 1.3.4 |
| CVE-2022-38668 | 7.5 | Aug 22 | HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller… Affected: 1.0+4 |
| CVE-2021-23514 | 7.5 | Jan 13 | This affects the package Crow before 0.3+4 Affected: before 0.3\+4 |
| CVE-2023-26142 | 6.1 | Sep 12 | All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values Affected: before 1.3.2 |
| CVE-2021-23824 | 6.1 | Jan 13 | This affects the package Crow before 0.3+4 Affected: before 0.3\+4 |
Showing 7
