CVE-2025-63655

Published January 29th, 2026

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

A NULL pointer dereference in the mk_http_range_parse function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.

monkey/monkey

Monkey HTTP Server

GitHub

655

archersec/security-advisories

Security advisories for CVE publication

GitHub