Critical Denial of Service Vulnerabilities in cpp-httplib Affect Fedora Users

Recent updates to the cpp-httplib library in Fedora address multiple critical Denial of Service (DoS) vulnerabilities. The vulnerabilities include CVE-2026-29076, which allows DoS via crafted HTTP POST requests, and CVE-2026-31870, which exploits malformed Content-Length headers. These vulnerabilities affect users of Fedora 43 and 44 who utilize the cpp-httplib library for HTTP/HTTPS operations. The updates also address issues related to payload size limit bypass and exception handling that could leak sensitive information. The patches were released on March 9, 2026, for version 0.37.0 and on March 11, 2026, for version 0.37.1. Users are urged to update their libraries to mitigate these risks. The vulnerabilities have been confirmed and are considered critical due to their potential impact on system availability and security.

Key Points: • Multiple critical DoS vulnerabilities in cpp-httplib affect Fedora users. • CVE-2026-29076 and CVE-2026-31870 are among the vulnerabilities addressed. • Users are advised to update to the latest library versions to mitigate risks.