ServerCo vulnerabilities
We track 1 vulnerability in ServerCo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 16, 2026.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest ServerCo vulnerabilities
- 7.4 High severity
getssl: External Control of File Name or Path
In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated against RFC 8555 before being used in challenge-file handling, allowing a maliciously crafted token to influence local path/filename usage dur