cesanta
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 152 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 10, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Mongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connection
Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX
Cesanta Mongoose MQTT Broker main.c fn stack-based overflow
Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching
Mongoose: Path traversal in SSI #include directives enables arbitrary file read
Mongoose: Reflected XSS via decoded URI in directory listing render
Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE
Mongoose: Stored XSS via unescaped filenames in directory listing
Mongoose: Multipart boundary/header scan logic error in mg_http_next_multipart
Mongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verification
Monitor cesanta in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.