CVE Browser

Page 1

Vendor: Tiny-Http Clear all

CVE-2026-66753 MEDIUM

tiny-http 0.12.0 HTTP Response Splitting via Header Injection

CVSS 6.3 EPSS 0.30% Jul 28, 2026

CVE-2026-66752 MEDIUM

tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling

CVSS 6.3 EPSS 0.33% Jul 28, 2026

CVE-2020-35884 MEDIUM

An issue was discovered in the tiny_http crate through 2020-06-16 for Rust. HTTP Request smuggling can occur via a malformed Transfer-Encoding header.

CVSS 6.5 EPSS 1.09% Dec 31, 2020

CVE-2017-16097 HIGH

tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the…

CVSS 7.5 EPSS 2.00% Jun 7, 2018

npm

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2026-66753	tiny-http 0.12.0 HTTP Response Splitting via Header Injection	MEDIUM	6.3	0.30%		Jul 28, 2026
CVE-2026-66752	tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling	MEDIUM	6.3	0.33%		Jul 28, 2026
CVE-2020-35884	An issue was discovered in the tiny_http crate through 2020-06-16 for Rust. HTTP Request smuggling can occur via a malformed Transfer-Encoding header.	MEDIUM	6.5	1.09%		Dec 31, 2020
CVE-2017-16097	tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the…	HIGH	7.5	2.00%	npm	Jun 7, 2018

Rows per page

Showing 1 to 4 CVEs · page 1