Skip to content
OpenAdvisories

Package · Go

github.com/fabiolb/fabio

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    Fabio allows HTTP clients to manipulate custom headers it adds

    Fabio is an HTTP(S) and TCP router for deploying applications managed by consul. Prior to version 1.6.6, Fabio allows clients to remove X-Forwarded headers (except X-Forwarded-For) due to a vulnerability in how it processes hop-by-hop headers. Fabio adds HTTP…