Yhirose - Cpp-httplib - CRITICAL - CVE-2026-45372. The cpp-httplib library, a widely used HTTP/HTTPS C++11 single-file header-only library, has a vulnerability that affects how it processes incoming header requests. Specifically, prior to version 0.44.0, the library applies percent-decoding to every header value except for Location and Referer. This implementation flaw allows an attacker to inject encoded line breaks (%0D%0A) that can be processed erroneously, resulting in potential header manipulation. The vulnerability has been addressed and patched in version 0.44.0, which should be adopted to mitigate these security concerns.