✅ Project Status: Actively Maintained
OpenLiteSpeed is actively maintained by LiteSpeed Technologies with regular releases.
| Year | Event |
|---|---|
| 2003 | LiteSpeed Technologies founded |
| 2005 | LiteSpeed Web Server Enterprise launched |
| 2013 | OpenLiteSpeed launched (open-source version) |
| 2015 | HTTP/2 support added |
| 2016 | QUIC/HTTP/3 development begins |
| 2018 | Native QUIC support in production |
| 2020 | HTTP/3 RFC 9000 compliance |
| 2021 | WordPress optimization (LSCache) |
| 2022 | CVE-2022-0072 path traversal fixed |
| 2023 | lsquic v4.x with HTTP/3 improvements |
| 2024 | Continued HTTP/3 development |
| 2025 | v1.8.5 released (Jan) - BCRYPT passwords, HTTP/2 fixes |
| 2026 | Active development continues |
LiteSpeed Technologies was founded in 2003, focusing on high-performance web server solutions.
The commercial LiteSpeed Web Server Enterprise was launched, offering:
In 2013, LiteSpeed Technologies released OpenLiteSpeed, the open-source version:
OpenLiteSpeed added HTTP/2 support:
OpenLiteSpeed was an early adopter of QUIC and HTTP/3:
| Year | Milestone |
|---|---|
| 2016 | QUIC development begins |
| 2018 | Production QUIC support |
| 2020 | HTTP/3 RFC 9000 compliance |
LiteSpeed Technologies developed lsquic, a high-performance QUIC library:
LiteSpeed Cache (LSCache) was optimized for OpenLiteSpeed:
OpenLiteSpeed includes a one-click WordPress installer:
| Aspect | Status |
|---|---|
| Development | ✅ Active |
| Maintainer | LiteSpeed Technologies |
| Repository | https://github.com/litespeedtech/openlitespeed |
| Stars | 1.4k+ |
| License | GPL-3.0 |
| Docker | Official image (500K+ pulls) |
| Version | Date | Key Changes |
|---|---|---|
| 1.8.5 | 2025-01-08 | BCRYPT passwords, HTTP/2 fixes, lsquic v4.4.1 |
| 1.8.4 | 2024 | Security updates, performance improvements |
| 1.8.3 | 2024 | QUIC stream priority, Ruby compatibility |
| 1.8.2 | 2024 | Bug fixes, security improvements |
| CVE | Year | Description | Status |
|---|---|---|---|
| CVE-2025-54939 | 2025 | QUIC-LEAK (lsquic DoS) | ✅ Patched |
| CVE-2025-24947 | 2025 | Hash-based DoS (lsquic) | ✅ Patched |
| CVE-2022-0072 | 2022 | Path traversal | ✅ Patched |
OpenLiteSpeed introduced several features that influenced web server development:
| Feature | OpenLiteSpeed | LiteSpeed Enterprise |
|---|---|---|
| License | GPL-3.0 | Commercial |
| Cost | Free | Paid license |
| HTTP/3 | ✅ Yes | ✅ Yes |
| LSCache | ✅ Yes | ✅ Yes + advanced |
| Support | Community | Professional |
| Control Panel | Web admin UI | Web admin UI + advanced |
| mod_security | ✅ Yes | ✅ Yes + rules |
| RailLite | ❌ No | ✅ Yes |
| Auto-fix | ❌ No | ✅ Yes |
OpenLiteSpeed has had relatively few major security vulnerabilities:
| Year | CVE | Description | Fixed |
|---|---|---|---|
| 2025 | CVE-2025-54939 | QUIC-LEAK (lsquic DoS) | ✅ v1.8.x |
| 2025 | CVE-2025-24947 | Hash-based DoS (lsquic) | ✅ lsquic v4.2.0 |
| 2022 | CVE-2022-0072 | Path traversal | ✅ Earlier versions |
The project has a good security track record with prompt patches.
Any questions?
Feel free to contact us. Find all contact information on our contact page.