Skip to content
OpenAdvisories

Product · GeneralSandman

TinyWeb

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-67185 Public exploit

    TinyWeb 0.0.8 Path Traversal via URL Path Component

    TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting ../ sequences in the URL path, which are concatenated directly to the configured web root in HttpBuilder::buildResponse()…

    GeneralSandman TinyWeb
  • High 7.5
    CVE-2026-67184 Public exploit

    TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request

    TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute() function fails to…

    GeneralSandman TinyWeb
  • High 7.5
    CVE-2026-67183 Public exploit

    TinyWeb 0.0.8 Memory Leak DoS via HTTP Request Handling

    TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to exhaust available memory by sending ordinary well-formed HTTP requests. Each request causes HttpParser::execute() to allocate Url objects, HttpHeaders objects,…

    GeneralSandman TinyWeb