cesanta
OSS Librariesoss-project
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting cesanta.
- CVE-2026-86716Cesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflow7.3
- CVE-2026-73253Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching
- CVE-2026-73255Mongoose: Path traversal in SSI #include directives enables arbitrary file read6.5
- CVE-2026-73259Mongoose: Reflected XSS via decoded URI in directory listing render5.4
- CVE-2026-73256Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE9.1
- CVE-2026-73254Mongoose: Stored XSS via unescaped filenames in directory listing5.4
- CVE-2026-73258Mongoose: Multipart boundary/header scan logic error in mg_http_next_multipart6.5
- CVE-2026-73251Mongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verification
- CVE-2026-73257Mongoose: Content-Length + Transfer-Encoding coexistence enables request smuggling9.1
- CVE-2026-11404Cesanta Mongoose Out-of-Bounds Read in MG_TLS_BUILTIN ClientHello Session ID Parsing7.5
- CVE-2026-6986Cesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verification3.7
- CVE-2026-6985Cesanta Mongoose TCP Option net_builtin.c handle_opt infinite loop5.3
- CVE-2026-5246Cesanta Mongoose P-384 Public Key mongoose.c mg_tls_verify_cert_signature authorization5.6
- CVE-2026-5245Cesanta Mongoose mDNS Record mongoose.c handle_mdns_record stack-based overflow5.6
- CVE-2026-5244Cesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflow7.3