Approved changes feed: RSS · Atom

cpe:2.3:a:cesanta:mongoose:6.11:*:*:*:*:*:*:*

part: a version: 6.11 update: *

VendorCesanta (91223ef9-9be1-51ca-9999-b3190ce9965d)
ProductMongoose (749d186c-b6b5-5dfe-a2fa-a74c5ea145b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/cesanta/mongoose purl2cpe 2026-06-01 10:17:36.212249
pkg:rpm/fedora/mongoose purl2cpe 2026-06-01 10:17:36.212251
pkg:rpm/opensuse/mongoose purl2cpe 2026-06-01 10:17:36.212252
pkg:sourceforge/mongoose-emb-web-server.mirror purl2cpe 2026-06-01 10:17:36.212254

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-10945 vulnerable 2026-06-08 05:10:37.512497 Details available
The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash, or NULL pointer dereference) via an HTTP request, related to the mbuf_insert function.
Published: 2018-06-19T21:00:00.000Z
Updated: 2024-08-05T07:54:35.946Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.