CVE-2025-63649

Published January 29th, 2026

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

An out-of-bounds read in the http_parser_transfer_encoding_chunked function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted POST request to the server.

monkey/monkey

Monkey HTTP Server

GitHub

655

archersec/security-advisories

Security advisories for CVE publication

GitHub