wiredoor

v1.7.3 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 3d Reverse Proxies & Load Balancers

✓ No known CVEs patched

This release patches 2 known CVEs

Topics

api-server ingress-service management-system nginx proxy self-hosted

+2 more

tunneling vpn

Affected surfaces

auth rce_ssrf

Summary

AI summary

Fixed default credential misuse and an nginx location injection vulnerability.

Full changelog

Fixed a security issue related to default credentials in the configuration by @dmesad in https://github.com/wiredoor/wiredoor/pull/148
Fixed an nginx location injection vulnerability by @dmesad in https://github.com/wiredoor/wiredoor/pull/149
Updated OAuth2 Proxy to the latest supported version, including security and maintenance improvements by @dmesad in https://github.com/wiredoor/wiredoor/pull/150

Special thanks to @EQSTLab for responsibly reporting the security issues and helping improve Wiredoor's security.

Full Changelog: https://github.com/wiredoor/wiredoor/compare/v1.7.2...v1.7.3

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track wiredoor

Get notified when new releases ship.

About wiredoor

Self hosted ingress-as-a-service platform that allows you to expose applications and services running in private or local networks to the internet