Skip to content
OpenAdvisories
Unscored DLA-2887-1 1 CVE

lighttpd - security update

Published Jan 18, 2022 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 lighttpd 1.4.45-1+deb9u1

Vulnerabilities 1

  • Unscored —
    CVE-2018-19052 Public exploit EPSS 14%

    An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ …