A new Debian Linux update has been published: DLA 3133-1: lighttpd security update
A lighttpd security update has been released for Debian GNU/Linux 10 to address an issue that can cause a NULL pointer dereference in the wstunnel module.Read more @ Linux Compatible