github.com/fabiolb/fabio
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header | github.com/fabiolb/fabio | Go | Medium | Fix reported | |
| Fabio allows HTTP clients to manipulate custom headers it adds | github.com/fabiolb/fabio | Go | Critical | Fix reported |