CVE-2023-50965: Starnight Micro HTTP Server

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI.

Affected products

  • Starnight Micro HTTP Server: affected versions not specified

Published 2023-12-17. Last modified 2026-06-17.