github.com/fabiolb/fabio vulnerabilities (Go)

2 vulnerabilities.

• github.com/fabiolb/fabio Go Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header CVE-2026-62987 Fix available 5.8 MediumSeptember 21, 2026
• github.com/fabiolb/fabio Go Fabio allows HTTP clients to manipulate custom headers it adds CVE-2025-48865 Fix available 9.1 CriticalMay 29, 2025