Skip to content
OpenAdvisories

Vendor

boringproxy

2 known vulnerabilities.

Products

boringproxy 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-70616

    boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint

    boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exhaust server file descriptors, goroutines, and memory by sending requests to the GET /loading endpoint with attacker-supplied id query …

    boringproxy boringproxy