CVE-2026-21428 | yhirose cpp-httplib up to 0.29.x Header write_headers crlf injection

A vulnerability classified as problematic has been found in yhirose cpp-httplib up to 0.29.x. This impacts the function write_headers of the component Header Handler. The manipulation leads to crlf injection.

This vulnerability is traded as CVE-2026-21428. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.