Skip to content
OpenAdvisories

Vendor

vouch

1 known vulnerabilities.

Products

vouch-proxy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-55149

    Vouch Proxy: Unbounded Multipart Cookie Allocation DoS

    Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using the auth_request module. Prior to 0.48.0, Cookie in pkg/cookie/cookie.go parses the total part count from an attacker-controlled multipart cookie name and passes the value to make([]string, n…

    vouch vouch-proxy github.com/vouch/vouch-proxy Go