VYPR

tiny-http

by Rust Tiny HTTP

CVEs (1)

  • CVE-2026-66753Jul 29, 2026
    risk 0.00cvss epss

    tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers to inject carriage return (0x0D) and line feed (0x0A) bytes into HTTP header values on both request and response sides due to insufficient validation in header parsing and…