CVE-2026-55149

Vouch Proxy is an SSO and OAuth/OIDC login gateway for Nginx. In versions prior to 0.48.0 (specifically v0.47.2), the Cookie() function in pkg/cookie/cookie.go parses the multipart cookie part count from an attacker-controlled cookie name and passes it unbounded to make([]string, N). A single una...

CVE-2026-55149 Vouch Proxy: Unbounded Multipart Cookie Allocation DoS

Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using the authrequest module. Prior to 0.48.0, Cookie in pkg/cookie/cookie.go parses the total part count from an attacker-controlled multipart cookie name and passes the value to makestring, numParts without checking that the value is...

GO-2026-6260 vouch-proxy has an Unbounded Multipart Cookie Allocation DoS in github.com/vouch/vouch-proxy

vouch-proxy has an Unbounded Multipart Cookie Allocation DoS in github.com/vouch/vouch-proxy...

CVE-2026-55149

creationtimestamp| type| source ---|---|--- 2026-08-20 18:35:10+00:00| published-proof-of-concept| https://github.com/vouch/vouch-proxy/security/advisories/GHSA-qqff-5854-px68...

GHSA-QQFF-5854-PX68 vouch-proxy has an Unbounded Multipart Cookie Allocation DoS

Unbounded Multipart Cookie Allocation DoS in vouch-proxy Summary vouch-proxy v0.47.2 contains an unauthenticated remote denial-of-service vulnerability in its multipart cookie reassembly logic. The /validate endpoint parses the total cookie part count directly from the attacker-controlled cookie...

vouch-proxy has an Unbounded Multipart Cookie Allocation DoS

Unbounded Multipart Cookie Allocation DoS in vouch-proxy Summary vouch-proxy v0.47.2 contains an unauthenticated remote denial-of-service vulnerability in its multipart cookie reassembly logic. The /validate endpoint parses the total cookie part count directly from the attacker-controlled cookie...

PT-2026-80760

Name of the Vulnerable Software and Affected Versions vouch-proxy version 0.47.2 Description An unauthenticated remote denial-of-service issue exists in the multipart cookie reassembly logic. The /validate and / external-auth-:id endpoints parse the total cookie part count directly from the cooki...