MEDIUM

GHSA-x477-fq37-q5wr

Initial debug-host handler implementation could leak information and facilitate denial of service

Quick fix

GHSA-x477-fq37-q5wr — fortio.org/proxy: upgrade to the fixed version with the command below.

go get fortio.org/proxy@v1.6.1

Details

### Impact version 1.5.0 and 1.6.0 when using the new `debug-host` feature could expose unnecessary information about the host

### Patches Use 1.6.1 or newer

### Workarounds Downgrade to 1.4.0 or set `debug-host` to empty

### References https://github.com/fortio/proxy/pull/38

Q&A https://github.com/fortio/proxy/discussions

Enter the version of the package you're using.

Introduced in: 1.5.0Fixed in: 1.6.1

Fixgo get fortio.org/proxy@v1.6.1