Maintainers for lighttpd are Debian lighttpd maintainers <team+lighttpd@tracker.debian.org>.
You may want to refer to the following individual bug pages: lighttpd-doc, lighttpd-mod-authn-gssapi, lighttpd-mod-authn-ldap, lighttpd-mod-authn-mysql, lighttpd-mod-authn-pam, lighttpd-mod-authn-sasl, lighttpd-mod-cml, lighttpd-mod-deflate, lighttpd-mod-geoip, lighttpd-mod-gnutls, lighttpd-mod-magnet, lighttpd-mod-maxminddb, lighttpd-mod-mbedtls, lighttpd-mod-mysql-vhost, lighttpd-mod-nss, lighttpd-mod-openssl, lighttpd-mod-trigger-b4-dl, lighttpd-mod-vhostdb-dbi, lighttpd-mod-vhostdb-pgsql, lighttpd-mod-webdav, lighttpd-mod-wolfssl, lighttpd-modules-dbi, lighttpd-modules-ldap, lighttpd-modules-lua, lighttpd-modules-mysql.
You might like to refer to the lighttpd package page, or to the Package Tracking System.
If you find a bug not listed here, please report it.