VYPR

webp_server_go

by webp-sh

CVEs (2)

  • CVE-2021-46104HigJan 19, 2022
    risk 0.49cvss 7.5epss 0.04

    An issue was discovered in webp_server_go 0.4.0. There is a directory traversal vulnerability that can read arbitrary file information on the server.

  • CVE-2026-53779HigJun 22, 2026
    risk 0.42cvss 7.5epss 0.01

    WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMG_PATH directory by sending requests with percent-encoded backslashes (%5C) that bypass the path.Clean() sanitization in…