### Vulnerable versions The following versions of lighttpd are vulnerable: | Software | Version | Vulnerable | |----------|-----------------------------------------------------------------------------------------------|---------------------------| | Lighttpd | [1.4.64](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.64) | [No :x:](./tests/1.4.64/) | | Lighttpd | [1.4.63](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.63) | [No :x:](./tests/1.4.63/) | | Lighttpd | [1.4.62](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.62) | [No :x:](./tests/1.4.62/) | | Lighttpd | [1.4.61](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.61) | [No :x:](./tests/1.4.61/) | | Lighttpd | [1.4.60](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.60) | [No :x:](./tests/1.4.60/) | | Lighttpd | [1.4.59](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.59) | [No :x:](./tests/1.4.59/) | | Lighttpd | [1.4.58](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.58) | [Yes :white_check_mark:](./tests/1.4.58/) | | Lighttpd | [1.4.57](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.57) | [Yes :white_check_mark:](./tests/1.4.57/) | | Lighttpd | [1.4.56](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.56) | [Yes :white_check_mark:](./tests/1.4.56/) | | Lighttpd | [1.4.56-rc7](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.56-rc7) | [No :x:](./tests/1.4.56-rc7/) | | Lighttpd | [1.4.56-rc6](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.56-rc6) | [No :x:](./tests/1.4.56-rc6/) | | Lighttpd | [1.4.56-rc5](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.56-rc5) | [No :x:](./tests/1.4.56-rc5/) | | Lighttpd | [1.4.56-rc4](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.56-rc4) | [No :x:](./tests/1.4.56-rc4/) | | Lighttpd | [1.4.56-rc3](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.56-rc3) | [No :x:](./tests/1.4.56-rc3/) | | Lighttpd | [1.4.56-rc2](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.56-rc2) | [No :x:](./tests/1.4.56-rc2/) | | Lighttpd | [1.4.56-rc1](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.56-rc1) | [No :x:](./tests/1.4.56-rc1/) | | Lighttpd | [1.4.55](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.55) | [No :x:](./tests/1.4.55/) | | Lighttpd | [1.4.54](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.54) | [No :x:](./tests/1.4.54/) | | Lighttpd | [1.4.53](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.53) | [No :x:](./tests/1.4.53/) | | Lighttpd | [1.4.52](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.52) | [No :x:](./tests/1.4.52/) | | Lighttpd | [1.4.51](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.51) | [No :x:](./tests/1.4.51/) | | Lighttpd | [1.4.50](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.50) | [No :x:](./tests/1.4.50/) | | Lighttpd | [1.4.49](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.49) | [No :x:](./tests/1.4.49/) | | Lighttpd | [1.4.48](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.48) | [No :x:](./tests/1.4.48/) | | Lighttpd | [1.4.47](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.47) | [No :x:](./tests/1.4.47/) | | Lighttpd | [1.4.46](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.46) | [No :x:](./tests/1.4.46/) | | Lighttpd | [1.4.45](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.45) | [No :x:](./tests/1.4.45/) | | Lighttpd | [1.4.44](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.44) | [No :x:](./tests/1.4.44/) | | Lighttpd | [1.4.43](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.43) | [No :x:](./tests/1.4.43/) | | Lighttpd | [1.4.42](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.42) | [No :x:](./tests/1.4.42/) | | Lighttpd | [1.4.41](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.41) | [No :x:](./tests/1.4.41/) | | Lighttpd | [1.4.40](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.40) | [No :x:](./tests/1.4.40/) | | Lighttpd | [1.4.39](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.39) | [No :x:](./tests/1.4.39/) | | Lighttpd | [1.4.38](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.38) | [No :x:](./tests/1.4.38/) | | Lighttpd | [1.4.37](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.37) | [No :x:](./tests/1.4.37/) | | Lighttpd | [1.4.36](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.36) | [No :x:](./tests/1.4.36/) | | Lighttpd | [1.4.36--rc1](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.36--rc1) | [No :x:](./tests/1.4.36--rc1/) | | Lighttpd | [1.4.35](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.35) | [No :x:](./tests/1.4.35/) | | Lighttpd | [1.4.34](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.34) | [No :x:](./tests/1.4.34/) | | Lighttpd | [1.4.33](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.33) | [No :x:](./tests/1.4.33/) | | Lighttpd | [1.4.32](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.32) | [No :x:](./tests/1.4.32/) | | Lighttpd | [1.4.31](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.31) | [No :x:](./tests/1.4.31/) | | Lighttpd | [1.4.30](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.30) | [No :x:](./tests/1.4.30/) | | Lighttpd | [1.4.29](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.29) | [No :x:](./tests/1.4.29/) | | Lighttpd | [1.4.28](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.28) | [No :x:](./tests/1.4.28/) | | Lighttpd | [1.4.27](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.27) | [No :x:](./tests/1.4.27/) | | Lighttpd | [1.4.26](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.26) | [No :x:](./tests/1.4.26/) | | Lighttpd | [1.4.25](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.25) | [No :x:](./tests/1.4.25/) | | Lighttpd | [1.4.24](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.24) | [No :x:](./tests/1.4.24/) | | Lighttpd | [1.4.23](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.23) | [No :x:](./tests/1.4.23/) | | Lighttpd | [1.4.22](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.22) | [No :x:](./tests/1.4.22/) | | Lighttpd | [1.4.21](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.21) | [No :x:](./tests/1.4.21/) | | Lighttpd | [1.4.20](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.20) | [No :x:](./tests/1.4.20/) | | Lighttpd | [1.4.19](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.19) | [No :x:](./tests/1.4.19/) | | Lighttpd | [1.4.18](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.18) | [No :x:](./tests/1.4.18/) | | Lighttpd | [1.4.17](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.17) | [No :x:](./tests/1.4.17/) | | Lighttpd | [1.4.16](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.16) | [No :x:](./tests/1.4.16/) | | Lighttpd | [1.4.15](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.15) | [No :x:](./tests/1.4.15/) | | Lighttpd | [1.4.14](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.14) | [No :x:](./tests/1.4.14/) | | Lighttpd | [1.4.13](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.13) | [No :x:](./tests/1.4.13/) | | Lighttpd | [1.4.12](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.12) | [No :x:](./tests/1.4.12/) | | Lighttpd | [1.4.11](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.11) | [No :x:](./tests/1.4.11/) | | Lighttpd | [1.4.10](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.10) | [No :x:](./tests/1.4.10/) | | Lighttpd | [1.4.9](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.9) | [No :x:](./tests/1.4.9/) | | Lighttpd | [1.4.8](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.8) | [No :x:](./tests/1.4.8/) | | Lighttpd | [1.4.7](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.7) | [No :x:](./tests/1.4.7/) | | Lighttpd | [1.4.6](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.6) | [No :x:](./tests/1.4.6/) | | Lighttpd | [1.4.5](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.5) | [No :x:](./tests/1.4.5/) | | Lighttpd | [1.4.4](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.4) | [No :x:](./tests/1.4.4/) | | Lighttpd | [1.4.3](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.3) | [No :x:](./tests/1.4.3/) | | Lighttpd | [1.4.2](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.2) | [No :x:](./tests/1.4.2/) | | Lighttpd | [1.4.1](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.4.1) | [No :x:](./tests/1.4.1/) | | Lighttpd | [1.3.16](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.3.16) | [No :x:](./tests/1.3.16/) | | Lighttpd | [1.3.15](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.3.15) | [No :x:](./tests/1.3.15/) | | Lighttpd | [1.3.14](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.3.14) | [No :x:](./tests/1.3.14/) | | Lighttpd | [1.3.13](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.3.13) | [No :x:](./tests/1.3.13/) | | Lighttpd | [1.3.12](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.3.12) | [No :x:](./tests/1.3.12/) | | Lighttpd | [1.3.11](https://api.github.com/repos/lighttpd/lighttpd1.4/zipball/refs/tags/lighttpd-1.3.11) | [No :x:](./tests/1.3.11/) |