A new Debian Linux update has been published: DSA 5040-1: lighttpd security update
A lighttpd security update has been released for Debian GNU/Linux 10 and 11 to address an out-of-bounds memory access in the mod_extforward plugin.Read more @ Linux Compatible