Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: GeneralSandman Clear all filters
TI-2026-47512 CVE-2026-67185 · GHSA-qh4x-9gfh-82jc

TinyWeb 0.0.8 Path Traversal via URL Path Component

Priority HIGH 77

TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting ../ sequences in the URL path, which are concatenated directly to the configured w…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00546 Published 2026-07-28 No fix listed CWE-22
TI-2026-47511 CVE-2026-67184 · GHSA-r4g2-gw8j-xgxv

TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request

Priority HIGH 77

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00608 Published 2026-07-28 No fix listed CWE-476
TI-2026-47510 CVE-2026-67183 · GHSA-9hxr-3mx5-3v44

TinyWeb 0.0.8 Memory Leak DoS via HTTP Request Handling

Priority HIGH 77

TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to exhaust available memory by sending ordinary well-formed HTTP requests.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00509 Published 2026-07-28 No fix listed CWE-401