Unscored DSA-4773-1 2 CVEs

yaws - security update

Published Oct 16, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	yaws	2.0.6+dfsg-1+deb10u1

Vulnerabilities 2

Unscored —

CVE-2020-24379

WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.

yaws yaws Debian Ubuntu

Sep 9, 2020
Unscored —

CVE-2020-24916 EPSS 17%

CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.

yaws yaws Debian Ubuntu

Sep 9, 2020