VYPR

Unauthenticated-Memory-Leak-Leads-To-Memory-Exhaustion-TinyWeb

by Theopaid

CVEs (1)

  • CVE-2026-67183Jul 28, 2026
    risk 0.00cvss epss 0.00

    TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to exhaust available memory by sending ordinary well-formed HTTP requests. Each request causes HttpParser::execute() to allocate Url objects, HttpHeaders objects, and HttpHeader…