Skip to content
OpenAdvisories

Package · Go

github.com/fatedier/frp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-73564

    frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

    frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 additio…

    fatedier frp github.com/fatedier/frp Go