Security: cesanta/mongoose
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Path traversal in SSI #include directives enables arbitrary file readGHSA-h7m9-764r-7x4x published
Aug 12, 2026 by scaprileModerate -
Stored XSS via unescaped filenames in directory listingGHSA-5g6j-m3pv-4f7g published
Aug 12, 2026 by scaprileModerate -
Heap OOB Read in TLS Certificate Chain Parsing (up to 16MB)GHSA-pfr9-hqr2-78rq published
Aug 12, 2026 by scaprileHigh -
OOB Read in NDP Neighbor Advertisement and Solicitation ProcessingGHSA-9qr7-6j3g-f76w published
Aug 12, 2026 by scaprileHigh -
Out-of-Bounds Read in IPv6 Extension Header ParsingGHSA-g96q-9mw4-vr8x published
Aug 12, 2026 by scaprileHigh -
TLS Hostname Verification Bypass via Overly Permissive Wildcard MatchingGHSA-jp6g-796f-39vp published
Aug 12, 2026 by scaprileHigh