tocsin

CVE-2026-33529

2 advisories.

Go/github.com/tobychui/zoraxy CVE-2026-33529: low 3.3, EPSS 0.51%

Zoraxy: Authenticated Path Traversal in Config Import leads to RCE

Action: Upgrade github.com/tobychui/zoraxy to 3.3.2 or later.

go get github.com/tobychui/zoraxy@v3.3.2

Affected

introducedfixedlast affected
03.3.2-

Fixed versions

3.3.2

Sources

CVE-2026-33529 · published · modified · JSON

Go/github.com/tobychui/zoraxy CVE-2026-33529: unknown, EPSS 0.51%

Zoraxy: Authenticated Path Traversal in Config Import leads to RCE in github.com/tobychui/zoraxy

Action: Upgrade github.com/tobychui/zoraxy to 3.3.2+incompatible or later.

go get github.com/tobychui/zoraxy@v3.3.2+incompatible

Affected

introducedfixedlast affected
03.3.2+incompatible-

Fixed versions

3.3.2+incompatible

Sources

CVE-2026-33529 · published · modified · JSON