litespeed_web_server vulnerabilities

CVEs whose affected-version data names the litespeed_web_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-93903Critical· 9.4

LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."

LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."

▾ Midnightlitespeedtech · LiteSpeed Web Servervia NVD

litespeed_web_server vulnerabilities (CVEs) · VulnSea