Chendotjs Lotos Webserver — known CVE vulnerabilities

Every CVE whose affected-product data names Chendotjs Lotos Webserver, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-22088 — CVSS 9.8 (critical): Lotos WebServer through 0.1.1 (commit 3eb36cc) has a use-after-free in buffer_avail() at buffer.h via a long URI, because realloc is…
• CVE-2024-24263 — CVSS 7.5 (high): Lotos WebServer v0.1.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the response_append_status_line function at…