VendorsProjectcontourcontourany version
Vulnerabilities

Projectcontour Contour any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2021-32783
Authorization bypass in Contour
Published 2021-07-23 · Modified
8.5EPSS 0.012
CVE-2026-41246
Contour: Lua code injection via Cookie Path Rewrite Policy
Published 2026-04-23 · Modified
8.1EPSS 0.008
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Published 2023-10-10 · Analyzed
7.5KEV1 PoCEPSS 1.000
CVE-2020-15127
Denial of service in Contour
Published 2020-08-05 · Modified
7.5EPSS 0.014