[ Vendor · 2 CVEs ]

tobychui

CVEs affecting tobychui published in the last 30 days, plus any tobychui CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-108899 12 Oct 2026 CVSS 7.3 tobychui zoraxyA flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of the file mod/dynamicproxy/authProviders.go of the…
CVE-2026-100390 25 Sep 2026 CVSS 7.4 tobychui zoraxyZoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. Unauthenticated…