Security Advisory

CVE-2026-22820

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-14 15:06:51
Last updated 2026-01-14 15:19:46
Assigner GitHub_M
State PUBLISHED

Description

Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5.