Boringproxy vulnerabilities
We track 1 vulnerability in Boringproxy products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score
Latest Boringproxy vulnerabilities
- 9.9 Critical severity
boringproxy: Improper Neutralization of CRLF Sequences
boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorized_keys file by supplying a percent-encoded new