Vulnerabilities

TI-2026-44491 CVE-2026-62314 · GHSA-6wcg-mqvh-fcvg

Anubis: Policy bypass via client controlled X-Original-URI header

HIGH 65

Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.0034 Published 2026-07-15 Fixed in 1.26.0-pre1, 1.26.0 CWE-284

TI-2025-40062 CVE-2025-64716 · GHSA-cf57-c578-7jvv

Anubis vulnerable to possible XSS via redir parameter when using subrequest auth mode

LOW 24

Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0043 Published 2025-11-13 Fixed in 1.23.0 CWE-601

TI-2025-34220 CVE-2025-54414

Anubis accepts crafted redirect URLs in pass-challenge 'Try Again' buttons

LOW 24

Anubis is a Web AI Firewall Utility that weighs the soul of users' connections using one or more challenges in order to protect upstream resources from scraper bots.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00569 Published 2025-07-26 Fixed in 1.21.3 CWE-601

Vulnerabilities

Filters

Anubis: Policy bypass via client controlled X-Original-URI header

Anubis vulnerable to possible XSS via redir parameter when using subrequest auth mode

Anubis accepts crafted redirect URLs in pass-challenge 'Try Again' buttons