Vulnerabilities

TI-2026-52908 CVE-2026-75601

Static Web Server: Authentication bypass on /metrics endpoint when --basic-auth is enabled

MEDIUM 53

Static Web Server (SWS) is a production-ready web server suitable for static web files or assets.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00392 Published 2026-08-26 Fixed in 2.44.0 CWE-306

TI-2026-21887 CVE-2026-27480 · GHSA-qhp6-635j-x7r2

MEDIUM 63

Static Web Server (SWS) is a production-ready web server suitable for static web files or assets.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00394 Published 2026-02-21 Fixed in 2.41.0 CWE-204

TI-2025-41246 CVE-2025-67487 · GHSA-459f-x8vq-xjjm

MEDIUM 64

Static Web Server (SWS) is a production-ready web server suitable for static web files or assets.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00418 Published 2025-12-09 Fixed in 2.40.1 CWE-61

TI-2024-21833 CVE-2024-32966 · GHSA-rwfq-v4hq-h7fg

MEDIUM 59

Static Web Server (SWS) is a tiny and fast production-ready web server suitable to serve static web files or assets.

CVSS 3.1MEDIUM 5.8 Network No auth User interaction EPSS 0.00369 Published 2024-05-01 Fixed in 2.30.0 CWE-79