{"action":"Upgrade miniserve to 0.32.0 or later.","affected":[{"fixed":"0.32.0","introduced":"0"}],"component":"miniserve","cve_ids":["CVE-2025-67124"],"ecosystem":"crates.io","epss":0.00325,"exploited":false,"fixed_versions":["0.32.0"],"ghsa_id":"GHSA-mxc8-4jqf-368q","id":"tcs_01M5KF1W2CXM8DM6ERNVZCNJB4","modified_at":"2026-02-03T03:12:29.030374Z","published_at":"2026-01-23T18:31:28Z","references":["https://osv.dev/vulnerability/GHSA-mxc8-4jqf-368q","https://nvd.nist.gov/vuln/detail/CVE-2025-67124","https://gist.github.com/thesmartshadow/55688f87f8b985eb530e07d00ef8c63f","https://github.com/svenstaro/miniserve"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-mxc8-4jqf-368q","url":"https://osv.dev/vulnerability/GHSA-mxc8-4jqf-368q"}],"summary":"miniserve affected by a TOCTOU and symlink race vulnerability"}