Skip to content
OpenAdvisories

Package · Go

github.com/fatedier/frp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.7
    CVE-2026-73564

    frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

    frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 additio…

    fatedier frp github.com/fatedier/frp Go
  • Medium 6.5
    CVE-2026-40910

    frp: Authentication bypass in frp HTTP vhost routing when routeByHTTPUser is used for access control

    frp is a fast reverse proxy. From 0.43.0 to 0.68.0, frp contains an authentication bypass in the HTTP vhost routing path when routeByHTTPUser is used as part of access control. In proxy-style requests, the routing logic uses the username from Proxy-Authorizat…

    fatedier frp github.com/fatedier/frp Go