All 4 CVE vulnerabilities found in contour, with AI-generated Chinese analysis, references, and POCs.
Vendor: projectcontour
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-50149 | Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled CWE-295 | 6.5 | Medium | 2026-08-19 |
| CVE-2026-41246 | Contour: Lua code injection via Cookie Path Rewrite Policy CWE-94 | 8.1 | High | 2026-04-23 |
| CVE-2021-32783 | Authorization bypass in Contour CWE-441 | 8.5 | High | 2021-07-23 |
| CVE-2020-15127 | Denial of service in Contour CWE-306 | 7.5 | High | 2020-08-05 |
All 4 known CVE vulnerabilities affecting contour with full Chinese analysis, references, and POCs where available.