GHSA-x477-fq37-q5wr

Initial debug-host handler implementation could leak information and facilitate denial of service

No scoreFix available

GHSA-x477-fq37-q5wr is a vulnerability with no CVSS score yet in fortio.org/proxy, published January 27, 2023. No source lists public exploit code. Fixed in fortio.org/proxy 1.6.1.

What does this mean?

Severity: UnratedNo CVSS score yet
Exploit chance: UnscoredNo EPSS score yet
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 1.6.1fortio.org/proxy

Description

Impact

version 1.5.0 and 1.6.0 when using the new debug-host feature could expose unnecessary information about the host

Patches

Use 1.6.1 or newer

Workarounds

Downgrade to 1.4.0 or set debug-host to empty

References

https://github.com/fortio/proxy/pull/38

Q&A https://github.com/fortio/proxy/discussions

Affected packages

Affected packages
Package	Affected	Fixed
`fortio.org/proxy` Go	1.5.0 up to 1.6.1	1.6.1

What each source reports

GitHub AdvisoriesNo score

Initial debug-host handler implementation could leak information and facilitate denial of service

Impact

version 1.5.0 and 1.6.0 when using the new debug-host feature could expose unnecessary information about the host

Patches

Use 1.6.1 or newer

Workarounds

Downgrade to 1.4.0 or set debug-host to empty

References

https://github.com/fortio/proxy/pull/38

Q&A https://github.com/fortio/proxy/discussions

Record: GHSA-x477-fq37-q5wr
Weakness: CWE-200
Updated: 2026-11-02

OSVNo score

Initial debug-host handler implementation could leak information and facilitate denial of service

Impact

version 1.5.0 and 1.6.0 when using the new debug-host feature could expose unnecessary information about the host

Patches

Use 1.6.1 or newer

Workarounds

Downgrade to 1.4.0 or set debug-host to empty

References

https://github.com/fortio/proxy/pull/38

Q&A https://github.com/fortio/proxy/discussions

Record: GHSA-x477-fq37-q5wr
Weakness: CWE-200
Updated: 2026-11-02

OSVGO-2023-1524No score

Initial debug-host handler implementation could leak information and facilitate denial of service in fortio.org/proxy

Initial debug-host handler implementation could leak information and facilitate denial of service in fortio.org/proxy

Record: GO-2023-1524
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	GitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.