Information on source package civetweb

Available versions

ReleaseVersion
bookworm1.15+dfsg-4
trixie1.16+dfsg-2+deb13u1
forky1.16+dfsg-5
sid1.16+dfsg-5

Open issues

BugbookwormtrixieforkysidDescription
CVE-2025-55763vulnerable (no DSA)fixedfixedfixedBuffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (lates ...
CVE-2025-9648vulnerable (no DSA)fixedfixedfixedA vulnerability in the CivetWeb library's function mg_handle_form_requ ...

Open unimportant issues

BugbookwormtrixieforkysidDescription
CVE-2026-29035vulnerablevulnerablevulnerablevulnerableCivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow v ...

Resolved issues

BugDescription
CVE-2026-5789Vulnerability related to an unquoted search path in CivetWeb v1.16. Th ...
CVE-2020-27304The CivetWeb web library does not validate uploaded filepaths when run ...
CVE-2018-12684Out-of-bounds Read in the send_ssi_file function in civetweb.c in Cive ...

Search for package or bug name: Reporting problems