{"action":"Upgrade github.com/fatedier/frp to 0.70.1 or later.","affected":[{"fixed":"0.70.1","introduced":"0.53.0"}],"component":"github.com/fatedier/frp","cve_ids":["CVE-2026-73564"],"ecosystem":"Go","epss":0.00524,"exploited":false,"fixed_versions":["0.70.1"],"ghsa_id":"GHSA-26gq-p25f-99cp","id":"tcs_01M5KERKK6RQZBJR2BXYAEYT3R","modified_at":"2026-08-18T15:10:56.272335772Z","published_at":"2026-07-24T21:48:04Z","references":["https://osv.dev/vulnerability/GHSA-26gq-p25f-99cp","https://github.com/fatedier/frp/security/advisories/GHSA-26gq-p25f-99cp","https://github.com/fatedier/frp/pull/5428","https://github.com/fatedier/frp/commit/7dc7be930e2452ae93fd32f2a77f8c6fcd0b652b","https://github.com/fatedier/frp","https://github.com/fatedier/frp/releases/tag/v0.70.1"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-26gq-p25f-99cp","url":"https://osv.dev/vulnerability/GHSA-26gq-p25f-99cp"}],"summary":"frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow"}