CVE-2026-38967

Critical

CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.

mitre·CWE-113·Published 2026-06-02

CVSS

9.8

EPSS

0.00

KEV

Exploits

cve.orgen

115 chars

CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.

NVDen

115 chars

CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H