Skip to content
OpenAdvisories

Package · Go

github.com/fatedier/frp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-40910

    frp: Authentication bypass in frp HTTP vhost routing when routeByHTTPUser is used for access control

    frp is a fast reverse proxy. From 0.43.0 to 0.68.0, frp contains an authentication bypass in the HTTP vhost routing path when routeByHTTPUser is used as part of access control. In proxy-style requests, the routing logic uses the username from Proxy-Authorizat…

    fatedier frp github.com/fatedier/frp Go