PatchTheCVElibhv vulnerabilities and fixes
Recent CVEs affecting libhv, with upgrade or downgrade steps. 3 tracked.
libhv has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-09-29. Highest priority: CVE-2023-26147 (score 38/100).
- CVE-2023-26148 MEDIUM 5.4 MITIGATE All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used t
- CVE-2023-26147 MEDIUM 5.3 MITIGATE All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input
- CVE-2023-26146 MEDIUM 6.1 MITIGATE All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file w
FAQ
How do I fix libhv vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libhv being exploited right now?
None of the tracked libhv CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libhv CVE should I patch first?
CVE-2023-26147 currently ranks highest (38/100): All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input .