crates.io/miniserve CVE-2025-67124: medium, EPSS 0.33%
miniserve affected by a TOCTOU and symlink race vulnerability
Action: Upgrade miniserve to 0.32.0 or later.
cargo update -p miniserve --precise 0.32.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.32.0 | - |
Fixed versions
| 0.32.0 |
Sources
- osv: GHSA-mxc8-4jqf-368q
- https://nvd.nist.gov/vuln/detail/CVE-2025-67124
- https://gist.github.com/thesmartshadow/55688f87f8b985eb530e07d00ef8c63f
- https://github.com/svenstaro/miniserve
CVE-2025-67124 · published · modified · JSON