Static-web-server vulnerabilities
We track 1 vulnerability in Static-web-server products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 9, 2025.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Static-web-server vulnerabilities
- 8.6 High severity
static-web-server: Improper Link Resolution Before File Access
Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. Versions 2.40.0 and below contain symbolic links (symlinks) which can be used to access files or directories outside the intended web root folder. SWS generally d