| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| Crow-1.3.4-Linux.deb.md5 | 2026-09-07 | 33 Bytes | |
| Crow-1.3.4-Linux.deb.sha256 | 2026-09-07 | 65 Bytes | |
| crow_all.h | 2026-09-07 | 565.5 kB | |
| Crow-1.3.4-Linux.deb | 2026-09-07 | 110.5 kB | |
| crow_all.h.sha256 | 2026-09-07 | 65 Bytes | |
| crow_all.h.md5 | 2026-09-07 | 33 Bytes | |
| Crow-1.3.4-Darwin.dmg | 2026-09-07 | 124.7 kB | |
| Crow-1.3.4-Darwin.dmg.md5 | 2026-09-07 | 33 Bytes | |
| Crow-1.3.4-Darwin.dmg.sha256 | 2026-09-07 | 65 Bytes | |
| Crow-1.3.4-win64.exe.sha256 | 2026-09-07 | 65 Bytes | |
| Crow-1.3.4-win64.exe.md5 | 2026-09-07 | 33 Bytes | |
| Crow-1.3.4-win64.exe | 2026-09-07 | 330.8 kB | |
| README.md | 2026-09-07 | 2.9 kB | |
| v1.3.4 source code.tar.gz | 2026-09-07 | 1.0 MB | |
| v1.3.4 source code.zip | 2026-09-07 | 1.1 MB | |
| Totals: 15 Items | 3.3 MB | 3 | |
What's Changed
Security Advisories fixed
This release mainly contains the fixes (and a test case to prevent regressions) for the following Security Advisories:
https://github.com/CrowCpp/Crow/security/advisories/GHSA-6mch-4jwv-f5q2 Global middleware rejection ignored during WebSocket upgrade, allowing authentication bypass https://github.com/CrowCpp/Crow/security/advisories/GHSA-7x84-xhp8-6cqj json parsers parse depth limited to 1024 to prevent stack overflow https://github.com/CrowCpp/Crow/security/advisories/GHSA-944c-h97m-jm2r WebSocket fragmented messages bypass the configured maximum payload limit https://github.com/CrowCpp/Crow/security/advisories/GHSA-x6vq-298x-6qgq Trailing-slash redirects can emit protocol-relative Location headers https://github.com/CrowCpp/Crow/security/advisories/GHSA-hc33-jfp4-5fqh Crow FileStore session cookie path traversal allows access to JSON files outside the session directory
Other changes
A memory leak on reading json data was closed,
- Fix [#1199]: correct ownership transfer in json::detail::r_string move operations (prevent leaks and invalid frees) by @jwolak in https://github.com/CrowCpp/Crow/pull/1200
The Behaviour on fd exhaustion on a system was fixed.
- fix(server): back off accepts on fd exhaustion (#1228) by @slindow-sds in https://github.com/CrowCpp/Crow/pull/1231
And there were a lot of other small fixes and enhancements.
- Fixing type-limits warning/error. by @yoboujon in https://github.com/CrowCpp/Crow/pull/1203
- Feature/issue [#1077] Add TCP Socket Options for HTTP and WebSocket Connections by @jwolak in https://github.com/CrowCpp/Crow/pull/1202
- Fix unused parameter warning in inject_header_via_set_header test case by @jwolak in https://github.com/CrowCpp/Crow/pull/1211
-
fix(query): decode %5B/%5D dict keys like literal brackets (#1109) by @soniafergusonship in https://github.com/CrowCpp/Crow/pull/1223
-
Fix broken star history chart in README by @OctoBored in https://github.com/CrowCpp/Crow/pull/1219
- docs: document TCP_NODELAY settings for HTTP and WebSocket guides by @jwolak in https://github.com/CrowCpp/Crow/pull/1215
- Fix typo in utility.h by @hilbert149 in https://github.com/CrowCpp/Crow/pull/1236
New Contributors
- @jwolak made their first contribution in https://github.com/CrowCpp/Crow/pull/1200
- @yoboujon made their first contribution in https://github.com/CrowCpp/Crow/pull/1203
- @OctoBored made their first contribution in https://github.com/CrowCpp/Crow/pull/1219
- @soniafergusonship made their first contribution in https://github.com/CrowCpp/Crow/pull/1223
- @slindow-sds made their first contribution in https://github.com/CrowCpp/Crow/pull/1231
- @hilbert149 made their first contribution in https://github.com/CrowCpp/Crow/pull/1236
Full Changelog: https://github.com/CrowCpp/Crow/compare/v1.3.3...v1.3.4