Skip to content
OpenAdvisories

Package · Go

github.com/bablilayoub/openhole

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.6
    CVE-2026-54650

    openhole-server vulnerable to path traversal via URL-decoded request path

    openhole exposes localhost to the internet in one command. In 0.1.1 and earlier, openhole-server in internal/server/public_proxy.go forwarded r.URL.Path instead of preserving the original request target with r.URL.EscapedPath(), allowing percent encoded dot s…

    bablilayoub openhole github.com/bablilayoub/openhole Go