Bug fix

• Breaking change in handling requests with Range in v0.15.1 and v0.15.2 #1772

Bug fix

• Severe directory traversal vulnerability (dotdotslash) #1768

Bug fix

• Malicious requests for many overlapping byte ranges of large files risk OOM #1766

Some new features and bug fixes

• Add missing #include for strcasecmp #1744
• ThreadPool: optional limit for jobs queue (#1741)
• Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
• Fix Windows std::max macro problem #1750
• Fix select() return code for fd >= 1024 (#1757)
• Add a getter for a bearer token from a request (#1755)
• Support move semantics for Response::set_content() (#1764)
• Treat paths with embedded NUL bytes as invalid (#1765)
• Fix usage of rand() is not seeded and depends on seeding by parent program #1747
• Fix check request range and fix response Content-Range. #1694

Bug fixes

• Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
• Fix #1736
• Fix #1665
• Change some of status messages based on RFC 9110 (#1740)
• Add StatusCode enum (#1739)
• Fix #1738

Bug fixes

• Fix #1685
• Fix #1724

New feature

• Add optional user defined header writer #1683

Bug fix and breaking change

Bug fixes:

• Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
• Avoid a -Warray-bounds false positive in GCC 13. (#1639)

Breaking change:

• Fix #1638

New features and bug fixes

• Removed unnecessary CRLF at the end of multipart ranges data
• Fix #1559
• Use memory mapped file for static file server (#1632)

Bug fixes

• Fix #1519
• Fix #1590 (#1630)
• Fix #1619
• Fix #1624