PatchTheCVE: monkeyhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-63658: A stack overflow in the mk_http_index_lookup function (mk_server/mk_http.c) of monkey commit f37e984 allows athttps://patchthecve.com/cve/CVE-2025-63658.htmlhttps://patchthecve.com/cve/CVE-2025-63658.htmlWed, 17 Jun 2026 09:53:20 +0000HIGH 7.5: A stack overflow in the mk_http_index_lookup function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.CVE-2025-63657: An out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit f37e984 allohttps://patchthecve.com/cve/CVE-2025-63657.htmlhttps://patchthecve.com/cve/CVE-2025-63657.htmlWed, 17 Jun 2026 09:53:20 +0000HIGH 7.5: An out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.CVE-2025-63656: An out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows https://patchthecve.com/cve/CVE-2025-63656.htmlhttps://patchthecve.com/cve/CVE-2025-63656.htmlWed, 17 Jun 2026 09:53:20 +0000HIGH 7.5: An out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.CVE-2025-63655: A NULL pointer dereference in the mk_http_range_parse function (mk_server/mk_http.c) of monkey commit f37e984 https://patchthecve.com/cve/CVE-2025-63655.htmlhttps://patchthecve.com/cve/CVE-2025-63655.htmlWed, 17 Jun 2026 09:53:19 +0000HIGH 7.5: A NULL pointer dereference in the mk_http_range_parse function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.CVE-2025-63653: An out-of-bounds read in the mk_vhost_fdt_close function (mk_server/mk_vhost.c) of monkey commit f37e984 allowhttps://patchthecve.com/cve/CVE-2025-63653.htmlhttps://patchthecve.com/cve/CVE-2025-63653.htmlWed, 17 Jun 2026 09:53:19 +0000HIGH 7.5: An out-of-bounds read in the mk_vhost_fdt_close function (mk_server/mk_vhost.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.CVE-2025-63652: A use-after-free in the mk_http_request_end function (mk_server/mk_http.c) of monkey commit f37e984 allows atthttps://patchthecve.com/cve/CVE-2025-63652.htmlhttps://patchthecve.com/cve/CVE-2025-63652.htmlWed, 17 Jun 2026 09:53:19 +0000HIGH 7.5: A use-after-free in the mk_http_request_end function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.CVE-2025-63651: A use-after-free in the mk_string_char_search function (mk_core/mk_string.c) of monkey commit f37e984 allows ahttps://patchthecve.com/cve/CVE-2025-63651.htmlhttps://patchthecve.com/cve/CVE-2025-63651.htmlWed, 17 Jun 2026 09:53:19 +0000HIGH 7.5: A use-after-free in the mk_string_char_search function (mk_core/mk_string.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.CVE-2025-63650: An out-of-bounds read in the mk_ptr_to_buf in mk_core function (mk_memory.c) of monkey commit f37e984 allows ahttps://patchthecve.com/cve/CVE-2025-63650.htmlhttps://patchthecve.com/cve/CVE-2025-63650.htmlWed, 17 Jun 2026 09:53:19 +0000HIGH 7.5: An out-of-bounds read in the mk_ptr_to_buf in mk_core function (mk_memory.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.CVE-2025-63649: An out-of-bounds read in the http_parser_transfer_encoding_chunked function (mk_server/mk_http_parser.c) of mohttps://patchthecve.com/cve/CVE-2025-63649.htmlhttps://patchthecve.com/cve/CVE-2025-63649.htmlWed, 17 Jun 2026 09:53:19 +0000HIGH 7.5: An out-of-bounds read in the http_parser_transfer_encoding_chunked function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted POST request to the server.