What’s Vulnerable › Products

projectcontour contour vulnerabilities

6 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your projectcontour contour version is affected

Exploited projectcontour contour vulnerabilities

• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability

Latest projectcontour contour vulnerabilities

• CVE-2026-50149 — Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled (CVSS 6.5)
• CVE-2026-41246 — Contour: Lua code injection via Cookie Path Rewrite Policy (CVSS 8.1)
• CVE-2024-36539 — (CVSS 9.8)
• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
• CVE-2021-32783 — Authorization bypass in Contour (CVSS 8.5)
• CVE-2020-15127 — Denial of service in Contour (CVSS 7.5)