openhole vulnerabilities

1 known vulnerability in openhole from Bablilayoub. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  openhole: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-54650Jul 28, 2026Bablilayoub

  openhole exposes localhost to the internet in one command. In 0.1.1 and earlier, openhole-server in internal/server/public_proxy.go forwarded r.URL.Path instead of preserving the original request target with r.URL.EscapedPath(), allowing percent encoded dot se