PR
Product
proxygen
On CISA KEVExploited in the wild
11
CVEs
1
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 3High 6Medium 2Low 0
Watch
Add proxygen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-91095 | 5.3 | Sep 28 | In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs could return stream handles… Affected: v2024.10.28.00 before v2026.09.28.00 |
| CVE-2025-55181 | 5.3 | Dec 2 | Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroSession which blocks the backing event loop and… Affected: v2025.08.25.00 through v2025.12.01.00 |
Showing 2