CVE-2025-63651

Published January 29th, 2026

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

A use-after-free in the mk_string_char_search function (mk_core/mk_string.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.

monkey/monkey

Monkey HTTP Server

GitHub

655

archersec/security-advisories

Security advisories for CVE publication

GitHub