Jpillora Chisel

2 CVEs affecting Jpillora Chisel. Latest disclosed: 2026-08-03. Critical: 0, High: 1.

Top CVEs affecting Jpillora Chisel
CVESeverityScorePublishedSummary
CVE-2024-43798High8.62024-08-26Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever read the documented `AUTH` environment variable used to…
CVE-2026-481132026-08-03Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restriction…