Known Vulnerabilities for Static Web Server by Static-web-server
Listed below are 1 of the newest known vulnerabilities associated with "Static Web Server" by "Static-web-server".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121603 json | Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that allows malicious linked servers to c... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-118663 json | @hono/node-server allows running the Hono application on Node.js. From 1.19.10 until 2.1.3, serveStatic decodes a request pat... | Not Provided | 2026-10-28 | 2026-10-29 |
| CVE-2026-116774 json | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65.0, c... | Not Provided | 2026-10-27 | 2026-10-28 |
| CVE-2026-116533 json | The Static Snapshot WordPress plugin through 0.2.1 does not sanitise shell metacharacters in a user-supplied value before con... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-114370 json | A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serving s... | Not Provided | 2026-10-21 | 2026-11-06 |
| CVE-2026-111377 json | FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforc... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-109254 json | FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which frees... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-107437 json | GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can ... | Not Provided | 2026-10-12 | 2026-10-16 |
| CVE-2026-106444 json | Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-105628 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avatar_url... | Not Provided | 2026-10-05 | 2026-10-05 |