CVE-2023-26142

MediumCVSS 6.5

Published: 12/09/2023(UTC)Updated: 29/10/2026(UTC)Translated: 29/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.56%

47th percentile - higher than 47% of all known CVEs

Summary

All versions of the crow package are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values. The set_header and add_header functions do not properly sanitize header values against CRLF injection, allowing an attacker to add \r\n characters and inject malicious content.

Risk Assessment

An attacker could inject additional headers or response content, potentially leading to cache poisoning, cross-site scripting, or response spoofing.

Recommendation

Update the crow package to a patched version or enforce validation and sanitization of input used in HTTP headers.

Other vulnerabilities in crow

CVE-2026-116011High
Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of nested objects to exhaust the worker thread stack, terminating the process and dropping all connections.

Original NVD description (English source)

All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values. Header values are not properly sanitized against CRLF Injection in the set_header and add_header functions. An attacker can add the \r\n (carriage return line feeds) characters to end the HTTP response headers and inject malicious content.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS