알려진 취약점
| CVE | 제목 | 영향 버전 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|---|
| CVE-2026-68548 | Algernon: Case-insensitive filesystem lets unauthenticated requests bypass /admin,/repo,/data permission-prefi... | * | 9.4 | — | 2026-11-13 | |
| CVE-2026-52792 | Algernon: Server-side script source disclosure on Windows via NTFS filename | * | 8.7 | — | 2026-08-19 | |
| CVE-2026-48126 | Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir | * | 8.2 | — | 2026-05-27 | |
| CVE-2026-46431 | Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: * | * | 4.3 | — | 2026-05-27 | |
| CVE-2026-46430 | Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS | * | 4.3 | — | 2026-05-27 | |
| CVE-2026-45728 | Algernon: Single-file mode unconditionally enables debug mode | * | 7.5 | — | 2026-05-27 | |
| CVE-2026-45721 | Algernon: handler.lua discovery walks parent directories above the server root | * | 9.0 | — | 2026-05-27 | |
| CVE-2026-43981 | Algernon: Race Condition in handle() shared LState | * | 8.2 | — | 2026-05-27 | |
| CVE-2026-43982 | Algernon: Path traversal file write via savein() | * | 8.7 | — | 2026-05-27 | |
| CVE-2025-65754 | Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injectin... | * | 6.1 | — | 2025-12-10 | |
| CVE-2023-26131 | All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto... | * | 5.4 | — | 2023-05-31 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).