CVE-2025-54581: vproxy Divide by Zero DoS Vulnerability

July 30, 2025 (updated July 31, 2025)

Untrusted, user-controlled data from the HTTP Proxy-Authorization header can induce a denial of service state.

References

github.com/0x676e67/vproxy
github.com/0x676e67/vproxy/commit/aa1bf64c5e7f1c471395f9f29175ffc1b16a1079
github.com/0x676e67/vproxy/releases/tag/v2.4.0
github.com/0x676e67/vproxy/security/advisories/GHSA-7h24-c332-p48c
github.com/advisories/GHSA-7h24-c332-p48c
nvd.nist.gov/vuln/detail/CVE-2025-54581

Code Behaviors & Features

Detect and mitigate CVE-2025-54581 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →