Xyproto Algernon vulnerabilities
- xyproto algernon Algernon: Server-side script source disclosure on Windows via NTFS filename 8.7 High
- xyproto algernon Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir 8.2 High
- xyproto algernon Algernon: Race Condition in handle() shared LState 8.2 High
- xyproto algernon Algernon: Path traversal file write via savein() 8.7 High
- xyproto algernon Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: * 4.3 Medium
- xyproto algernon Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS 4.3 Medium
- xyproto algernon Algernon: handler.lua discovery walks parent directories above the server root 9.0 Critical
- xyproto algernon Algernon: Single-file mode unconditionally enables debug mode 7.5 High