← Database

CVE-2026-22820

LOW CVSS: 3.7 Published: 2026-01-14 Modified: 2026-06-17

Description

Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5.

Affected Platforms

Outray Outray

Weakness Type

CWE-367

References