svenstaro/miniserve
GitHub
Releases57
Frequency1 month 3 weeks
Last Release
Stars7.73K
🌟 For when you really just want to serve some files over HTTP right now!
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| = 0.32.0, < 0.32.0 | 6.8 MEDIUM | — | ||
A TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads are enabled) can allow an attacker to overwrite arbitrary files outside the intended upload/document root in deployments where the attacker can create/replace filesystem entries in the upload destination directory (e.g., shared writable directory/volume). | ||||