Skip to content
OpenAdvisories

Package · Go

github.com/almeidapaulopt/tsdproxy

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.0

    TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation

    ## Description A vulnerability was discovered in TSDProxy where it forwards its internal per-process authentication token to all proxied backend services. When `identityHeaders` is enabled (the default), tsdproxy injects `x-tsdproxy-auth-token` into every ups…