Review reviewCritical
CVE-2026-38967
the affected product
CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.
- CVSS
- 9.8
- EPSS
- 0.33% 25.8% percentile
- CISA KEV
- Not listed
- Published
- 2026.06.03