Vendor/product archive

ohler / agoo CVEs

Beta · best-effort

2 CVEs tagged to ohler / agoo — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to ohler vendor archive

CVE-2022-30288

Published May 4, 2022

Agoo before 2.14.3 does not reject GraphQL fragment spreads that form cycles, leading to an application crash. NOTE: the vendor has disputed this on the grounds that it is not the…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2020-7670

Published Jun 10, 2020

agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and request smuggling atta…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1