p PatchFirst

PatchFirst · Latest vulnerabilities

outray vulnerabilities

Vulnerabilities published for outray in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2026-22819

    Medium · CVSS 5.9EPSS 0.24%Fix available

    Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts

    Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. This vulnerability is fixed in 0.1.5.

    outrayNode.js
    • Update to 0.1.5
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2026-22820

    Medium · CVSS 6.3EPSS 0.2%Fix available

    Outray cli is vulnerable to race conditions in tunnels creation

    Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5.

    outrayNode.js
    • Update to 0.1.5
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →