Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-26528
9.1
CRITICALCVSS v3
Published
February 8, 2021
CVSS v2
6.4 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool.
GitHub