| Release | Version |
|---|---|
| jessie | 1.6.4-2 |
| stretch | 1.6.4-2 |
| buster | 1.6.4-3 |
| bullseye | 1.14.1-3 |
| bookworm | 1.15.0+~1.15.0-1 |
| trixie | 2.1.0+~1.15.7-2 |
| sid | 2.1.0+~1.15.7-2 |
| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-43800 | vulnerable | vulnerable | vulnerable | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | serve-static serves static files. serve-static passes untrusted user i ... |
| Bug | Description |
|---|---|
| CVE-2015-1164 | Open redirect vulnerability in the serve-static plugin before 1.7.2 fo ... |