Skip to content
OpenAdvisories

Vendor

boringproxy

2 known vulnerabilities.

Products

boringproxy 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-70615

    boringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creation

    boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorized_keys file by supplying a percent-encoded ne…

    boringproxy boringproxy