static-web-server (crates.io) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the crates.io package static-web-server, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2025-67487 — CVSS 8.6 (high): Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. Versions 2.40.0 and below contain…
• CVE-2024-32966 — CVSS 5.8 (medium): Static Web Server (SWS) is a tiny and fast production-ready web server suitable to serve static web files or assets. In affected versions…
• CVE-2026-27480 — CVSS 5.3 (medium): Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. In versions 2.1.0 through 2.40.1, a…