CVE-2026-22820

Publication date

2026-01-14 15:06:51

Family

GitHub_M

State

PUBLISHED

Description

Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5.