Approved changes feed: RSS · Atom
cpe:2.3:a:goproxy_project:goproxy:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Goproxy Project (7218cf5a-88f8-5a10-b755-031d967536a6) |
|---|---|
| Product | Goproxy (a4b4248a-b2fa-5e86-85dc-fb397a51fbf5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/goproxy/goproxy |
purl2cpe | 2026-06-01 10:12:14.303372 |
pkg:golang/github.com/goproxy/goproxy |
purl2cpe | 2026-06-01 10:12:14.303375 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-91143 |
vulnerable | 2026-09-16 04:32:55.538206 |
goproxy through 15.3 Authentication Bypass via CONNECT
HIGH (7.2)
goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can issue CONNECT requests to establish tunnels through the authenticated proxy without providing credentials, enabling arbitrary TCP traffic relay and access to restricted destinations.
Published: 2026-09-14T21:45:43.908Z
Updated: 2026-09-24T14:22:10.409Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.