Security Advisory
CVE-2026-22820
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5.