Static Web Server is vulnerable to symbolic link Path Traversal

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-67487 · Microsoft / collected KEV context

EUVD-2025-201823

GHSA-459f-x8vq-xjjm

cve-program · CVE-2025-67487

• https://github.com/static-web-server/static-web-server/security/advisories/GHSA-459f-x8vq-xjjm
• https://github.com/static-web-server/static-web-server/commit/308f0d26ceb9c2c8bd219315d0f53914763357f2

euvd · EUVD-2025-201823

• https://github.com/static-web-server/static-web-server/security/advisories/GHSA-459f-x8vq-xjjm
• https://github.com/static-web-server/static-web-server/commit/308f0d26ceb9c2c8bd219315d0f53914763357f2

nvd · CVE-2025-67487

• https://github.com/static-web-server/static-web-server/commit/308f0d26ceb9c2c8bd219315d0f53914763357f2
• https://github.com/static-web-server/static-web-server/security/advisories/GHSA-459f-x8vq-xjjm

osv · GHSA-459f-x8vq-xjjm

• https://github.com/static-web-server/static-web-server/security/advisories/GHSA-459f-x8vq-xjjm
• https://nvd.nist.gov/vuln/detail/CVE-2025-67487
• https://github.com/static-web-server/static-web-server/commit/308f0d26ceb9c2c8bd219315d0f53914763357f2
• https://github.com/static-web-server/static-web-server

No related operational record is retained in the current change model.