qgy18/pangolin

Releases0

Stars345

A light weight http tunnels to localhost.

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2025-56332NVD↗	< 1.7.0	Dec 30, 2025Tuesday, 30 December 2025, 18:15	9.1 CRITICAL	—
Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration
CVE-2025-56333NVD↗	< 1.7.0	Dec 29, 2025Monday, 29 December 2025, 16:15	9.8 CRITICAL	—
An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component