Iodine vulnerabilities

2 known vulnerabilities in Iodine from Boazsegev. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  facil.io: Uncontrolled Resource Consumption

  CVE-2026-41146Apr 22, 2026Boazsegev

  facil.io is a C micro-framework for web applications. Prior to commit 5128747363055201d3ecf0e29bf0a961703c9fa0, `fio_json_parse` can enter an infinite loop when it encounters a nested JSON value starting with `i` or `I`. The process spins in user space and peg

• 7.5 High severity

  Iodine: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-22050Jan 4, 2024Boazsegev

  Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.