Static-web-server - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2026-08-26.

Products

CVE-2026-75601 - CVSS 4.3 (medium), 2026-08-26: Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. Through 2.43.0, instances with both basic-auth and metrics…
CVE-2026-27480 - CVSS 5.3 (medium), 2026-02-21: Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. In versions 2.1.0 through 2.40.1, a timing-based username…
CVE-2025-67487 - CVSS 8.6 (high), 2025-12-09: Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. Versions 2.40.0 and below contain symbolic links (symlinks)…
CVE-2024-32966 - CVSS 5.8 (medium), 2024-05-01: Static Web Server (SWS) is a tiny and fast production-ready web server suitable to serve static web files or assets. In affected versions if directory…