Skip to content
OpenAdvisories

Package · Go

github.com/TecharoHQ/anubis

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.8
    CVE-2026-62314

    Anubis: Policy bypass via client controlled X-Original-URI header

    Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. From 1.22.0 until 1.26.0-pre1, lib/policy/checker.go PathChecker.Check() trusted the client-controlled X-Original-URI header befor…

    TecharoHQ anubis github.com/TecharoHQ/anubis Go
  • Medium 5.1
    CVE-2025-64716

    Anubis vulnerable to possible XSS via redir parameter when using subrequest auth mode

    Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. Prior to version 1.23.0, when using subrequest authentication, Anubis did not perform validation of the redirect URL and redirects…

    TecharoHQ anubis github.com/TecharoHQ/anubis Go