HIGHGo
GHSA-26gq-p25f-99cp· CVE-2026-73564, GO-2026-6103frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow
Modified: 8/18/2026
package
Go/github.com/fatedier/frp
pkg:go/github.com/fatedier/frp
MEDIUM6.5Go
GHSA-pq96-pwvg-vrr9· CVE-2026-40910, GO-2026-5549frp has an authentication bypass in HTTP vhost routing when routeByHTTPUser is used for access control
Modified: 6/25/2026
—Go
GO-2026-5549· CVE-2026-40910, GHSA-pq96-pwvg-vrr9frp has an authentication bypass in HTTP vhost routing when routeByHTTPUser is used for access control in github.com/fatedier/frp
Modified: 6/25/2026
—Go
GO-2026-6103· CVE-2026-73564, GHSA-26gq-p25f-99cpfrp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow in github.com/fatedier/frp
Modified: 8/18/2026