Source: qt6-httpserver
X-Debbugs-CC: [email protected]
Severity: important
Tags: security

Hi,

The following vulnerability was published for qt6-httpserver.

CVE-2026-110944[0]:
| Resource exhaustion vulnerability in the HTTP request handling of
| the QHttpServer component of Qt HTTP Server.

https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-110944:

https://codereview.qt-project.org/c/qt/qthttpserver/+/768560
https://codereview.qt-project.org/c/qt/qthttpserver/+/768934

https://github.com/qt/qthttpserver/commit/4b91991b667225db81feb34378d6a5106c992e1a
 (v6.11.3)
https://github.com/qt/qthttpserver/commit/eda23f6a61693004dc697e36e4a2c7836e48f128
 (v6.11.3)

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-110944
    https://www.cve.org/CVERecord?id=CVE-2026-110944

Please adjust the affected versions in the BTS as needed.

Reply via email to