Winstone Servlet Container vulnerabilities

1 known vulnerability in Winstone Servlet Container from Rickknowles. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Winstone Servlet Container: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-56122Jun 25, 2026Rickknowles

  Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences that are not sanitized when serving static files from the con