← Back

Mongoose

mongoose

Vendor: Sergey Lyubka • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-4530
1Sergey Lyubka
1Mongoose
Apr 23, 2026
Dec 31, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI.
CVE-2009-1354
1Sergey Lyubka
1Mongoose
Apr 23, 2026
Apr 21, 2009
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.