on Debian 9, just now, 2024-11-23 :-), run into the same problem, was fixed by replacing
cgi.assign = ( "cgi" => "" )
by just
cgi.assign = ( "" => "" )
in /etc/lighttpd/conf-available/10-cgi.conf
/etc/lighttpd/conf-available/10-cgi.conf