Boringproxy - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2026-08-05.

Products

• Boringproxy - 2 CVEs

Newest CVEs of Boringproxy

• CVE-2026-70616 - CVSS 7.1 (high), 2026-08-05: boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exhaust server file descriptors,…
• CVE-2026-70615 - CVSS 9.9 (critical), 2026-08-05: boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject…