Sergey Lyubka Mongoose — known CVE vulnerabilities

Every CVE whose affected-product data names Sergey Lyubka Mongoose, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2009-4530 — CVSS 5.0 (medium): Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI.
• CVE-2009-1354 — CVSS 4.0 (medium): Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.