Skip to content
OpenAdvisories

Package · Go

github.com/vouch/vouch-proxy

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    Vouch Proxy: Unbounded Multipart Cookie Allocation DoS

    Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using the auth_request module. Prior to 0.48.0, Cookie in pkg/cookie/cookie.go parses the total part count from an attacker-controlled multipart cookie name and passes the value to make([]string, n…