Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: boringproxy Clear all filters
TI-2026-49331 CVE-2026-70616 · GHSA-5gjj-xq44-85r4

boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint

Priority MEDIUM 64

boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exhaust server file descriptors, goroutines, and memory by sending requests to the GET /loading en…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00336 Published 2026-08-05 No fix listed CWE-833
TI-2026-49330 CVE-2026-70615 · GHSA-85pm-3999-r2fw

boringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creation

Priority HIGH 70

boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorized_keys…

CVSS 4.0HIGH 8.5 Network Low privileges No interaction EPSS 0.00351 Published 2026-08-05 No fix listed CWE-93