CVE-2025-0825 — cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte

Matched remediation archetype

General vulnerability remediation

This catalog composition supplies bounded fallback guidance. Explicitly reviewed curated workflows load with the complete record below.

Check exposure

• Confirm the affected component, deployment paths, reachable interfaces, and enabled features from inventories and configuration, without probing production destructively.
• Compare the advisory's affected conditions with the repository lockfiles, build manifests, artifacts, and runtime inventory.
• Identify data sensitivity, trust boundaries, and privilege level for every confirmed affected deployment.

Remediate safely

• Apply a vendor-supported fix or remove the affected component or feature; record the selected change and its source in the repository.
• Update direct and transitive dependency locks, generated artifacts, deployment manifests, and asset inventories together.
• Add a regression test for the documented unsafe condition using inert inputs and preserve rollback instructions.