Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
2 vulnerabilities by snail007
CVE-2026-91143 (GCVE-0-2026-91143)
Vulnerability from nvd – Published: 2026-09-14 21:45 – Updated: 2026-09-14 21:45
VLAI
EPSS
VEX
Title
goproxy through 15.3 Authentication Bypass via CONNECT
Summary
goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can issue CONNECT requests to establish tunnels through the authenticated proxy without providing credentials, enabling arbitrary TCP traffic relay and access to restricted destinations.
Severity
CWE
- CWE-288 - Authentication Bypass Using an Alternate Path or Channel
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/geo-chen/oss/blob/main/goproxy.md | third-party-advisoryexploit |
| https://github.com/snail007/goproxy/blob/v15.3/ut… | technical-description |
| https://github.com/snail007/goproxy/blob/v15.3/se… | technical-description |
| https://github.com/snail007/goproxy | product |
| https://www.vulncheck.com/advisories/goproxy-thro… | third-party-advisory |
Impacted products
Date Public
2026-07-29 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:golang/github.com/snail007/goproxy",
"product": "goproxy",
"repo": "https://github.com/snail007/goproxy",
"vendor": "snail007",
"versions": [
{
"lessThanOrEqual": "15.3",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:goproxy_project:goproxy:*:*:*:*:*:*:*:*",
"versionEndIncluding": "15.3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "George Chen"
}
],
"datePublic": "2026-07-29T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can issue CONNECT requests to establish tunnels through the authenticated proxy without providing credentials, enabling arbitrary TCP traffic relay and access to restricted destinations."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-288",
"description": "Authentication Bypass Using an Alternate Path or Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T21:45:43.908Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "Researcher write-up",
"tags": [
"third-party-advisory",
"exploit"
],
"url": "https://github.com/geo-chen/oss/blob/main/goproxy.md"
},
{
"name": "utils/structs.go at v15.3",
"tags": [
"technical-description"
],
"url": "https://github.com/snail007/goproxy/blob/v15.3/utils/structs.go"
},
{
"name": "services/http.go at v15.3",
"tags": [
"technical-description"
],
"url": "https://github.com/snail007/goproxy/blob/v15.3/services/http.go"
},
{
"tags": [
"product"
],
"url": "https://github.com/snail007/goproxy"
},
{
"name": "VulnCheck Advisory: goproxy through 15.3 Authentication Bypass via CONNECT",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/goproxy-through-15.3-authentication-bypass-via-connect"
}
],
"title": "goproxy through 15.3 Authentication Bypass via CONNECT",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-91143",
"datePublished": "2026-09-14T21:45:43.908Z",
"dateReserved": "2026-09-14T20:35:39.074Z",
"dateUpdated": "2026-09-14T21:45:43.908Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-91143 (GCVE-0-2026-91143)
Vulnerability from cvelistv5 – Published: 2026-09-14 21:45 – Updated: 2026-09-14 21:45
VLAI
EPSS
VEX
Title
goproxy through 15.3 Authentication Bypass via CONNECT
Summary
goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can issue CONNECT requests to establish tunnels through the authenticated proxy without providing credentials, enabling arbitrary TCP traffic relay and access to restricted destinations.
Severity
CWE
- CWE-288 - Authentication Bypass Using an Alternate Path or Channel
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/geo-chen/oss/blob/main/goproxy.md | third-party-advisoryexploit |
| https://github.com/snail007/goproxy/blob/v15.3/ut… | technical-description |
| https://github.com/snail007/goproxy/blob/v15.3/se… | technical-description |
| https://github.com/snail007/goproxy | product |
| https://www.vulncheck.com/advisories/goproxy-thro… | third-party-advisory |
Impacted products
Date Public
2026-07-29 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:golang/github.com/snail007/goproxy",
"product": "goproxy",
"repo": "https://github.com/snail007/goproxy",
"vendor": "snail007",
"versions": [
{
"lessThanOrEqual": "15.3",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:goproxy_project:goproxy:*:*:*:*:*:*:*:*",
"versionEndIncluding": "15.3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "George Chen"
}
],
"datePublic": "2026-07-29T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can issue CONNECT requests to establish tunnels through the authenticated proxy without providing credentials, enabling arbitrary TCP traffic relay and access to restricted destinations."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-288",
"description": "Authentication Bypass Using an Alternate Path or Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T21:45:43.908Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "Researcher write-up",
"tags": [
"third-party-advisory",
"exploit"
],
"url": "https://github.com/geo-chen/oss/blob/main/goproxy.md"
},
{
"name": "utils/structs.go at v15.3",
"tags": [
"technical-description"
],
"url": "https://github.com/snail007/goproxy/blob/v15.3/utils/structs.go"
},
{
"name": "services/http.go at v15.3",
"tags": [
"technical-description"
],
"url": "https://github.com/snail007/goproxy/blob/v15.3/services/http.go"
},
{
"tags": [
"product"
],
"url": "https://github.com/snail007/goproxy"
},
{
"name": "VulnCheck Advisory: goproxy through 15.3 Authentication Bypass via CONNECT",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/goproxy-through-15.3-authentication-bypass-via-connect"
}
],
"title": "goproxy through 15.3 Authentication Bypass via CONNECT",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-91143",
"datePublished": "2026-09-14T21:45:43.908Z",
"dateReserved": "2026-09-14T20:35:39.074Z",
"dateUpdated": "2026-09-14T21:45:43.908Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}