MEDIUM5.8CVE-2024-32966static-web-server vulnerable to stored Cross-site Scripting in directory listings via file names
from 0, < 2.30.0
MEDIUM5.3CVE-2026-27480Static Web Server affected by timing-based username enumeration in Basic Authentication due to early response on invalid usernames
>= 2.1.0, < 2.41.0
—CVE-2025-67487Static Web Server vulnerable to a symbolic link path traversal