xyproto algernon

• CVE-2026-52792 High 8.7 Algernon: Server-side script source disclosure on Windows via NTFS filename 0.6%
• CVE-2026-48126 High 8.2 Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir 0.3%
• CVE-2026-46431 Medium 4.3 Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: * 0.2%
• CVE-2026-46430 Medium 4.3 Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS 0.2%
• CVE-2026-45728 High 7.5 Algernon: Single-file mode unconditionally enables debug mode 0.3%
• CVE-2026-45721 Critical 9.0 Algernon: handler.lua discovery walks parent directories above the server root 0.4%
• CVE-2026-43981 High 8.2 Algernon: Race Condition in handle() shared LState 0.2%
• CVE-2026-43982 High 8.7 Algernon: Path traversal file write via savein() 0.3%