Packages / openSUSE Tumbleweed / Source / Productivity/Networking/Web/Proxy / v2ray-core
Network tools for building a computer network
Additional mobile libraries
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-84303] Published: gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher e | Critical(9.1) | AffectedDetails (2)
|
| [CVE-2026-72817] Published: go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-F | Medium(6.9) | UnknownDetails (2)
|
| [CVE-2026-33186] Published: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go serve | Critical(9.1) | UnknownDetails (2)
|
| [CVE-2026-27017] Published: uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerprint mismatch with Ch | Medium(5.3) | UnknownDetails (2)
|
| [CVE-2025-297850] Published: golang-github-teddysun-v2ray-plugin-5.25.0-1.1 on GA media | Unknown | UnknownDetails (2)
|
| [CVE-2025-47911] Published: Go Networking vulnerabilities | Medium(5.3) | UnknownDetails (2)
|
Last synced:
Authoritative source; repository metadata signature verified
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f