https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-26843.htmlhttps://patchthecve.com/cve/CVE-2021-26843.htmlWed, 17 Jun 2026 03:43:51 +0000HIGH 7.5: An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the de_dotdot function may cause a Denial-of-Service (daemon crash) due to overlapping memory ranges being passed to memcpy. This can triggered with an HTTP GET request for a crafted fhttps://patchthecve.com/cve/CVE-2017-10671.htmlhttps://patchthecve.com/cve/CVE-2017-10671.htmlWed, 17 Jun 2026 01:00:31 +0000HIGH 7.8: Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted filename.https://patchthecve.com/cve/CVE-2013-0348.htmlhttps://patchthecve.com/cve/CVE-2013-0348.htmlTue, 16 Jun 2026 23:49:16 +0000LOW 2.1: thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading the file.