Ocelot vulnerabilities

CVEs whose affected-version data names the Ocelot package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-58172Critical· 9.1PoC

4mo ago

Ocelot - IP Allow/Block List Bypass for WebSocket Upgrade Requests

Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability that allows denied clients to circumvent IP-based access restrictions by sending WebSocket upgrade requests. The WebSocket upgrade pipeline …

▾ AbyssalThreeMammals · OcelotEPSS 0.56%via CVEORG