Unscored DLA-2384-1 2 CVEs

yaws - security update

Published Sep 26, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	yaws	2.0.4+dfsg-1+deb9u1

Vulnerabilities 2

Unscored —

CVE-2020-24379

WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.

yaws yaws Debian Ubuntu

Sep 9, 2020
Unscored —

CVE-2020-24916 EPSS 17%

CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.

yaws yaws Debian Ubuntu

Sep 9, 2020