critical9.8
CVE-2026-38967
CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.
Impact
CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.
Affected products
| Product | Affected versions |
|---|---|
| CrowCpp Crow | through 1.3.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.