FLAT-538L2 (CVE-2026-45576)
Lack of data validation - Path Traversal In github.com/openziti/zrok/v2
5.7
Medium
Ecosystem: Go
Package: github.com/openziti/zrok/v2
FLAT-IRYS4 (CVE-2026-42275)
Lack of data validation - Path Traversal In github.com/openziti/zrok
8.1
High
Ecosystem: Go
Package: github.com/openziti/zrok
FLAT-1GBA2 (CVE-2026-40304)
Improper authorization control for web services In github.com/openziti/zrok/v2
3.8
Low
Ecosystem: Go
Package: github.com/openziti/zrok/v2
FLAT-MRMPM (CVE-2026-40303)
Asymmetric denial of service - ReDoS In github.com/openziti/zrok
7.7
High
Ecosystem: Go
Package: github.com/openziti/zrok
FLAT-MRBRY (CVE-2026-40302)
Reflected cross-site scripting (XSS) In github.com/openziti/zrok/v2
1.2
Low
Ecosystem: Go
Package: github.com/openziti/zrok/v2