CyberSecBulletin

Lite-web-server vulnerabilities

We track 1 vulnerability in Lite-web-server products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 25, 2023.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Lite-web-server vulnerabilities

  • 7.5 High severity

    lite-web-server: Uncontrolled Resource Consumption

    CVE-2023-26104Lite-web-serverEPSS 1.17%

    All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.