Skip to content
OpenAdvisories

Vendor

TecharoHQ

3 known vulnerabilities.

Products

anubis 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.8
    CVE-2026-62314

    Anubis: Policy bypass via client controlled X-Original-URI header

    Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. From 1.22.0 until 1.26.0-pre1, lib/policy/checker.go PathChecker.Check() trusted the client-controlled X-Original-URI header befor…

    TecharoHQ anubis github.com/TecharoHQ/anubis Go
  • Medium 5.1
    CVE-2025-64716

    Anubis vulnerable to possible XSS via redir parameter when using subrequest auth mode

    Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. Prior to version 1.23.0, when using subrequest authentication, Anubis did not perform validation of the redirect URL and redirects…

    TecharoHQ anubis github.com/TecharoHQ/anubis Go
  • Medium 5.1
    CVE-2025-54414

    Anubis accepts crafted redirect URLs in pass-challenge 'Try Again' buttons

    Anubis is a Web AI Firewall Utility that weighs the soul of users' connections using one or more challenges in order to protect upstream resources from scraper bots. In versions 1.21.2 and below, attackers can craft malicious pass-challenge pages that cause a…

    TecharoHQ anubis