Threats affecting pkg:github/xyproto/algernon

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.2%	CVE-2026-43981xyproto algernon · Race Condition High8.2EPSS 0.2%2026-05-26CVE Database V5CVE-2026-43981 CVE-2026-43981 is a race condition vulnerability in the xyproto algernon web server versions prior to 1.17.6. The issue arises because a synchronization mutex protecting a shared Lua state is released too early, allowing concurrent requests to corrupt the Lua virtual machine state. This vulnerability has a high severity with a CVSS score of 8.2. The vulnerability is fixed in version 1.17.6 of algernon. EPSS 0.2%Vulnerability CWE-362	CVE Database V5	2026-05-26

Page 1 of 1