darkhttpd vulnerabilities (Root)

2 vulnerabilities.

• darkhttpd Root darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which... CVE-2024-23771 Fix available 9.8 CriticalJanuary 22, 2024
• darkhttpd Root darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing... CVE-2024-23770 Fix available 5.5 MediumJanuary 22, 2024