Crow vulnerabilities

CVEs whose affected-version data names the Crow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116011High· 7.5

today

Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()

Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of …

▾ TwilightCrowCpp · Crowvia CVEORG