GeneralSandman vulnerabilities
We track 3 vulnerabilities in GeneralSandman products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 28, 2026.
Latest GeneralSandman vulnerabilities
- 7.5 High severity
TinyWeb: Improper Limitation of a Pathname to a Restricted Directory
TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting ../ sequences in the URL path, which are concatenated directly to the configured web root in HttpBuilder::buildResponse()
- 7.5 High severity
TinyWeb: NULL Pointer Dereference
TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute() function fails to
- 7.5 High severity
TinyWeb: Missing Release of Memory after Effective Lifetime
TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to exhaust available memory by sending ordinary well-formed HTTP requests. Each request causes HttpParser::execute() to allocate Url objects, HttpHeaders objects,