Read the docs

Go-proxyproto Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Go-proxyproto Project records in CISA KEV

No Go-proxyproto Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Go-proxyproto · all components

Priority LOW 36

The package github.com/pires/go-proxyproto before 0.6.0 are vulnerable to Denial of Service (DoS) via creating connections without the proxy protocol header.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01648 Published 2021-07-21 Fixed in 0.6.0, 0.6.1 CWE-400
Priority LOW 26

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service (DoS) via the parseVersion1() function.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01871 Published 2021-03-08 Fixed in 0.5.0 CWE-400
Open these records in search →