EUVD-2026-97488

A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of the file mod/dynamicproxy/authProviders.go of the component Path Exception Matcher. This manipulation of the argument PathPrefix causes improper authorization. It is possible to initiate the attack...

CVE-2026-108899

The tobychui zoraxy software (up to version 3.3.4 ) is vulnerable to improper authorization within the Path Exception Matcher component. The flaw exists in the handleBasicAuth function located in mod/dynamicproxy/authProviders.go, where manipulation of the PathPrefix argument allows for unauthori...