https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T14:21:55.684143+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2022-06440 bdu:2022-06440 2026-10-12T14:21:56.092989+00:00 bdu:2022-06440 https://vulnerability.circl.lu/vuln/fkie_cve-2022-39267 fkie_cve-2022-39267 2026-10-12T14:21:56.093059+00:00

Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments. Versions prior to 1.8.8-release are subject to authentication bypass in the admin and monitor user groups by deleting the X-Requested-With: XMLHttpRequest field in the request header. This issue has been patched in 1.8.8-release. There are no known workarounds.

 https://vulnerability.circl.lu/vuln/ghsa-mxrx-fg8p-5p5j GHSA-mxrx-fg8p-5p5j — Bifrost vulnerable to authentication check flaw that leads to authentication bypass 2026-10-12T14:21:56.093123+00:00

Affected: Go: github.com/brokercap/Bifrost

### Impact The admin and monitor user groups need to be authenticated by username and password. If we delete the X-Requested-With: XMLHttpRequest field in the request header,the authentication will be bypassed.

### Patches https://github.com/brockercap/Bifrost/pull/201

### Workarounds Upgrade to the latest version

 https://vulnerability.circl.lu/vuln/gsd-2022-39267 gsd-2022-39267 2026-10-12T14:21:56.093175+00:00 gsd-2022-39267