github.com/pires/go-proxyproto
A Go library implementation of the PROXY protocol, versions 1 and 2.
View on Github
Activity
- Latest release
- 1w ago
- Total releases
- 21
- Cadence
- ~44 days
- Last 12 months
- 10
Reach
- Stars
- 624
Details
- First release
- Dec 09, 2020
| Version | Released | |
|---|---|---|
v0.16.0
minor
|
v0.16.0
minor
Dependencies (1)
|
|
v0.15.0
minor
|
v0.15.0
minor
Dependencies (1)
|
|
v0.14.0
minor
|
v0.14.0
minor
Dependencies (1)
|
|
v0.13.0
minor
|
v0.13.0
minor
Dependencies (1)
|
|
v0.12.0
minor
|
v0.12.0
minor
Dependencies (1)
|
|
v0.11.0
minor
|
v0.11.0
minor
Dependencies (1)
|
|
v0.10.0
minor
|
v0.10.0
minor
Dependencies (1)
|
|
v0.9.2
patch
|
v0.9.2
patch
Dependencies (1)
|
|
v0.9.1
patch
|
v0.9.1
patch
Dependencies (1)
|
|
v0.9.0
minor
|
v0.9.0
minor
Dependencies (1)
|
|
v0.8.1
patch
|
v0.8.1
patch
Dependencies (1)
|
|
v0.8.0
minor
|
v0.8.0
minor
Dependencies (1)
|
|
v0.7.0
minor
|
v0.7.0
minor
|
|
v0.6.2
patch
|
v0.6.2
patch
|
|
v0.6.1
patch
|
v0.6.1
patch
|
|
v0.6.0
minor
1 CVE
CVE-2021-23409
GO-2022-0233
GHSA-xcf7-q56x-78gh
Jul 01, 2022
Resource exhaustion in github.com/pires/go-proxyproto The PROXY protocol server does not impose a timeout on reading the header from new connections, allowing a malicious client to cause resource exhaustion and a denial of service by opening many connections and sending no data on them. v0.6.0 of the proxyproto package adds support for a user-defined header timeout. v0.6.1 adds a default timeout of 200ms and v0.6.2 increases the default timeout to 10s. Fixed in
0.6.1
References Updated Mar 13, 2026 · Source: OSV.dev |
v0.6.0
minor
|
|
v0.5.0
minor
1 CVE
CVE-2021-23409
GO-2022-0233
GHSA-xcf7-q56x-78gh
Jul 01, 2022
Resource exhaustion in github.com/pires/go-proxyproto The PROXY protocol server does not impose a timeout on reading the header from new connections, allowing a malicious client to cause resource exhaustion and a denial of service by opening many connections and sending no data on them. v0.6.0 of the proxyproto package adds support for a user-defined header timeout. v0.6.1 adds a default timeout of 200ms and v0.6.2 increases the default timeout to 10s. Fixed in
0.6.1
References Updated Mar 13, 2026 · Source: OSV.dev |
v0.5.0
minor
|
|
v0.4.2
patch
2 CVEs
CVE-2021-23409
GO-2022-0233
GHSA-xcf7-q56x-78gh
Jul 01, 2022
Resource exhaustion in github.com/pires/go-proxyproto The PROXY protocol server does not impose a timeout on reading the header from new connections, allowing a malicious client to cause resource exhaustion and a denial of service by opening many connections and sending no data on them. v0.6.0 of the proxyproto package adds support for a user-defined header timeout. v0.6.1 adds a default timeout of 200ms and v0.6.2 increases the default timeout to 10s. Fixed in
0.6.1
References Updated Mar 13, 2026 · Source: OSV.dev
CVE-2021-23351
GHSA-fqh4-rh59-xhvf
SNYK-GOLANG-GITHUBCOMPIRESGOPROXYPROTO-1081577
May 18, 2021
github.com/pires/go-proxyproto denial of service vulnerability
4.9
/ 10
Medium
Network
Low
High
None
Unchanged
None
None
High
The package Fixed in
0.5.0
References
Updated Jul 08, 2026 · Source: OSV.dev |
v0.4.2
patch
|
|
v0.4.1
patch
2 CVEs
CVE-2021-23409
GO-2022-0233
GHSA-xcf7-q56x-78gh
Jul 01, 2022
Resource exhaustion in github.com/pires/go-proxyproto The PROXY protocol server does not impose a timeout on reading the header from new connections, allowing a malicious client to cause resource exhaustion and a denial of service by opening many connections and sending no data on them. v0.6.0 of the proxyproto package adds support for a user-defined header timeout. v0.6.1 adds a default timeout of 200ms and v0.6.2 increases the default timeout to 10s. Fixed in
0.6.1
References Updated Mar 13, 2026 · Source: OSV.dev
CVE-2021-23351
GHSA-fqh4-rh59-xhvf
SNYK-GOLANG-GITHUBCOMPIRESGOPROXYPROTO-1081577
May 18, 2021
github.com/pires/go-proxyproto denial of service vulnerability
4.9
/ 10
Medium
Network
Low
High
None
Unchanged
None
None
High
The package Fixed in
0.5.0
References
Updated Jul 08, 2026 · Source: OSV.dev |
v0.4.1
patch
|
|
v0.4.0
minor
2 CVEs
CVE-2021-23409
GO-2022-0233
GHSA-xcf7-q56x-78gh
Jul 01, 2022
Resource exhaustion in github.com/pires/go-proxyproto The PROXY protocol server does not impose a timeout on reading the header from new connections, allowing a malicious client to cause resource exhaustion and a denial of service by opening many connections and sending no data on them. v0.6.0 of the proxyproto package adds support for a user-defined header timeout. v0.6.1 adds a default timeout of 200ms and v0.6.2 increases the default timeout to 10s. Fixed in
0.6.1
References Updated Mar 13, 2026 · Source: OSV.dev
CVE-2021-23351
GHSA-fqh4-rh59-xhvf
SNYK-GOLANG-GITHUBCOMPIRESGOPROXYPROTO-1081577
May 18, 2021
github.com/pires/go-proxyproto denial of service vulnerability
4.9
/ 10
Medium
Network
Low
High
None
Unchanged
None
None
High
The package Fixed in
0.5.0
References
Updated Jul 08, 2026 · Source: OSV.dev |
v0.4.0
minor
|
|
v0.3.3
initial
2 CVEs
CVE-2021-23409
GO-2022-0233
GHSA-xcf7-q56x-78gh
Jul 01, 2022
Resource exhaustion in github.com/pires/go-proxyproto The PROXY protocol server does not impose a timeout on reading the header from new connections, allowing a malicious client to cause resource exhaustion and a denial of service by opening many connections and sending no data on them. v0.6.0 of the proxyproto package adds support for a user-defined header timeout. v0.6.1 adds a default timeout of 200ms and v0.6.2 increases the default timeout to 10s. Fixed in
0.6.1
References Updated Mar 13, 2026 · Source: OSV.dev
CVE-2021-23351
GHSA-fqh4-rh59-xhvf
SNYK-GOLANG-GITHUBCOMPIRESGOPROXYPROTO-1081577
May 18, 2021
github.com/pires/go-proxyproto denial of service vulnerability
4.9
/ 10
Medium
Network
Low
High
None
Unchanged
None
None
High
The package Fixed in
0.5.0
References
Updated Jul 08, 2026 · Source: OSV.dev |
v0.3.3
initial
|