Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Svenstaro Clear all filters
TI-2025-41138 CVE-2025-67124 · GHSA-mxc8-4jqf-368q

A TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads…

Priority MEDIUM 63

A TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads are enabled) can allow an attacker to overwrite arbitrary files outside the intended upload/document root in deployments where the…

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00325 Published 2026-01-23 Fixed in 0.32.0 CWE-367