CrowCpp Crow HTTP server versions up to 1.3.1 are vulnerable to response header injection because they do not properly validate response header values. This can lead to injection of malicious headers in HTTP responses, potentially impacting client behavior or security. The vulnerability is publicly disclosed but lacks detailed technical or exploit information. No patch or official fix status is provided in the available data.

The vulnerability allows injection of arbitrary HTTP response headers, which could be leveraged to manipulate client-side behavior or security controls relying on headers. However, no known exploits or active attacks have been reported. The exact impact depends on how the injected headers are used by clients or intermediaries.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider applying input validation or sanitization on response header values if possible. Monitor vendor channels for updates regarding an official fix.