Vouch Proxy: Unbounded Multipart Cookie Allocation DoS

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-55149 · Microsoft / collected KEV context

EUVD-2026-78827

GHSA-qqff-5854-px68

GO-2026-6260

cve-program · CVE-2026-55149

• https://github.com/vouch/vouch-proxy/security/advisories/GHSA-qqff-5854-px68
• https://github.com/vouch/vouch-proxy/commit/fa18ce30ba50a4863a436acad044c22965329c4f
• https://github.com/vouch/vouch-proxy/releases/tag/v0.48.0

euvd · EUVD-2026-78827

• https://github.com/vouch/vouch-proxy/security/advisories/GHSA-qqff-5854-px68
• https://github.com/vouch/vouch-proxy/commit/fa18ce30ba50a4863a436acad044c22965329c4f
• https://github.com/vouch/vouch-proxy/releases/tag/v0.48.0

nvd · CVE-2026-55149

• https://github.com/vouch/vouch-proxy/commit/fa18ce30ba50a4863a436acad044c22965329c4f
• https://github.com/vouch/vouch-proxy/releases/tag/v0.48.0
• https://github.com/vouch/vouch-proxy/security/advisories/GHSA-qqff-5854-px68

osv · GHSA-qqff-5854-px68

• https://github.com/vouch/vouch-proxy/security/advisories/GHSA-qqff-5854-px68
• https://github.com/vouch/vouch-proxy/commit/fa18ce30ba50a4863a436acad044c22965329c4f
• https://github.com/vouch/vouch-proxy
• https://github.com/vouch/vouch-proxy/releases/tag/v0.48.0

osv · GO-2026-6260

• https://github.com/vouch/vouch-proxy/security/advisories/GHSA-qqff-5854-px68
• https://github.com/vouch/vouch-proxy/commit/fa18ce30ba50a4863a436acad044c22965329c4f
• https://github.com/vouch/vouch-proxy/releases/tag/v0.48.0

No related operational record is retained in the current change model.