Negative chunk-size DoS in cpp-httplib (CVE-2026-45352)

A negative chunk-size in HTTP chunked Transfer-Encoding causes cpp-httplib to misinterpret the chunk size, leading to unbounded memory allocation and process crash. An unauthenticated remote attacker can exploit this to cause a denial of service. Affected versions: - <=0.43.3 We recommend updating to: 0.43.4. CVSS 7.5 · our assessment: this_week Reference: https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-h6wq-j5mv-f3q8 Details: https://vuln.today/cve/CVE-2026-45352