on Debian 9, just now, 2024-11-23 :-), run into the same problem, was fixed by replacing

cgi.assign = ( "cgi" => "" ) 

by just

cgi.assign = ( "" => "" ) 

in /etc/lighttpd/conf-available/10-cgi.conf