Tiny-http Project Tiny-http — known CVE vulnerabilities

Every CVE whose affected-product data names Tiny-http Project Tiny-http, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-16097 — CVSS 7.5 (high): tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by…
• CVE-2020-35884 — CVSS 6.5 (medium): An issue was discovered in the tiny_http crate through 2020-06-16 for Rust. HTTP Request smuggling can occur via a malformed…