Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-91143

goproxy through 15.3 Authentication Bypass via CONNECT

goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can issue CONNECT requests to establish tunnels through the authenticated proxy without providing credentials, enabling arbitrary TCP traffic relay and access to restricted destinations.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Goproxy Project Snail007
Products
Goproxy Goproxy
CVE-2023-37788

goproxy: Denial of service (DoS) via unspecified vectors.

goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Goproxy Project Redhat
Products
Goproxy Acm Openshift and 3 more