CVE-2026-38967

Description

CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.

References

• https://github.com/CrowCpp/Crow/issues/1165
• https://github.com/CrowCpp/Crow/pull/1167