LibHTP unbounded folded header handling leads to denial service

LibHTP, an HTTP parser library, can be overwhelmed by specially crafted HTTP headers that fold (wrap) in unusual ways, causing it to spend excessive time processing them and making the service unavailable to legitimate users.

LibHTP contains an unbounded processing vulnerability in folded header handling (CWE-770) where maliciously crafted HTTP headers with excessive folding can trigger algorithmic complexity attacks. The vulnerability allows remote attackers to cause denial of service through network-based HTTP traffic without authentication, fixed in version 0.5.46.