CRITICAL9.0CVE-2026-45721Algernon: handler.lua discovery walks parent directories above the server root in github.com/xyproto/algernon from 0, < 1.17.7
CRITICAL9.0CVE-2026-45721Algernon: handler.lua discovery walks parent directories above the server root in github.com/xyproto/algernon from 0, < 1.17.7
HIGH8.2CVE-2026-48126Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir in github.com/xyproto/algernon from 0, < 1.17.8
HIGH8.2Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir in github.com/xyproto/algernon
from 0, < 1.17.8
HIGH7.5Algernon: Single-file mode unconditionally enables debug mode in github.com/xyproto/algernon
from 0, < 1.17.7
HIGH7.5Algernon: Single-file mode unconditionally enables debug mode in github.com/xyproto/algernon
from 0, < 1.17.7
MEDIUM6.1Algernon engine and themes vulnerable to Cross-site Scripting
from 0, <= 1.15.2
MEDIUM4.3Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: * in github.com/xyproto/algernon
from 0, < 1.17.7
MEDIUM4.3Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: * in github.com/xyproto/algernon
from 0, < 1.17.7
MEDIUM4.3Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS in github.com/xyproto/algernon
from 0, < 1.17.7
MEDIUM4.3Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS in github.com/xyproto/algernon
from 0, < 1.17.7
—Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename in github.com/xyproto/algernon
from 0, < 1.17.9
—Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename in github.com/xyproto/algernon
from 0, < 1.17.9
—Algernon Cross-Site Scripting vulnerability in github.com/xyproto/algernon
from 0, < 1.17.5
—Algernon Cross-Site Scripting vulnerability in github.com/xyproto/algernon
from 0, < 1.17.5