Read the docs

Svenstaro

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Svenstaro records in CISA KEV

No Svenstaro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Miniserve 1 record MEDIUM

Records

1 record

TI-2025-41138 CVE-2025-67124 · GHSA-mxc8-4jqf-368q

A TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads…

Priority MEDIUM 63

A TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads are enabled) can allow an attacker to overwrite arbitrary files outside the intended upload/document root in deployments where the…

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00325 Published 2026-01-23 Fixed in 0.32.0 CWE-367
Open these records in search →