Glewlwyd Security Vulnerabilities - February

CVE-2021-45379

Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password.

CVE-2022-29967

static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal.