VYPR

libks

by Signalwire

CVEs (1)

  • CVE-2026-49846HigSep 11, 2026
    risk 0.49cvss 7.5epss

    libks provides foundational support for signalwire C products. Prior to version 2.0.11, `clean_uri()` in libks's HTTP request parser fails to reject URIs whose path has more segments than its internal canonicalization buffer can hold. The canonicalization step silently passes…