LI
Product
lighttpd
by lighttpd · last CVE Nov 3, 2025
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 2Low 0
Watch

Add lighttpd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-22707
5.9
9%
Jan 6
In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated…
Affected: 1.4.46 through 1.4.63
CVE-2018-25103
5.3
1%
Jun 17
Use-after-free vulnerabilities in lighttpd <= 1.4.50
Affected: through 1.4.50
Showing 2