← Back

Svenstaro

svenstaro

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Miniserve
miniserve
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-67124
1Svenstaro
1Miniserve
Jun 17, 2026
Jan 23, 2026
N/A· v4
6.8 MEDIUM· v3
N/A· v2
A TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads are enabled) can allow an attacker to overwrite arbitrary files outside the intended upload/document root in deployments where the...Show more
A TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads are enabled) can allow an attacker to overwrite arbitrary files outside the intended upload/document root in deployments where the attacker can create/replace filesystem entries in the upload destination directory (e.g., shared writable directory/volume).Show less