Mongoose_jll vulnerabilities (Julia)
17 vulnerabilities.
-
Mongoose_jllJulia Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching 9.1 Critical -
Mongoose_jllJulia Mongoose: Path traversal in SSI #include directives enables arbitrary file read 6.5 Medium -
Mongoose_jllJulia Mongoose: Reflected XSS via decoded URI in directory listing render 5.4 Medium -
Mongoose_jllJulia Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE 9.1 Critical -
Mongoose_jllJulia Mongoose: Stored XSS via unescaped filenames in directory listing 5.4 Medium -
Mongoose_jllJulia Mongoose: Multipart boundary/header scan logic error in mg_http_next_multipart 6.5 Medium -
Mongoose_jllJulia Mongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verification 9.3 Critical -
Mongoose_jllJulia Mongoose: Content-Length + Transfer-Encoding coexistence enables request smuggling 9.1 Critical -
Mongoose_jllJulia Cesanta Mongoose Out-of-Bounds Read in MG_TLS_BUILTIN ClientHello Session ID Parsing 8.7 High -
Mongoose_jllJulia Cesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verification 6.3 Medium -
Mongoose_jllJulia Cesanta Mongoose TCP Option net_builtin.c handle_opt infinite loop 6.9 Medium -
Mongoose_jllJulia Cesanta Mongoose P-384 Public Key mongoose.c mg_tls_verify_cert_signature authorization 6.3 Medium -
Mongoose_jllJulia Cesanta Mongoose mDNS Record mongoose.c handle_mdns_record stack-based overflow 6.3 Medium -
Mongoose_jllJulia Cesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflow 6.9 Medium -
Mongoose_jllJulia Cesanta Mongoose Poly1305 Authentication Tag tls_chacha20.c mg_chacha20_poly1305_decrypt signature verification 6.3 Medium -
Mongoose_jllJulia Cesanta Mongoose TCP Sequence Number net_builtin.c getpeer verification of source 6.3 Medium -
Mongoose_jllJulia Cesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values 6.3 Medium