Issues

• TLS: probe Heartbleed, DROWN and ROBOT

  enhancementpriority:P3
  cerberauth/proxyaudit#40 · Filter by author emmanuelgautier opened on Nov 15, 2026

• Fix CVSS scores that do not match their vector

  bugpriority:P2
  cerberauth/proxyaudit#39 · Filter by author emmanuelgautier opened on Nov 15, 2026

• Disclosure: soft-404 baseline, base path, application endpoints and error signatures

  cerberauth/proxyaudit#37 · Filter by author emmanuelgautier opened on Nov 15, 2026

• HTTP methods: TRACE / TRACK and method override checks

  cerberauth/proxyaudit#36 · Filter by author emmanuelgautier opened on Nov 15, 2026

• CORS: wildcard, reflection without credentials and weak origin matching

  cerberauth/proxyaudit#35 · Filter by author emmanuelgautier opened on Nov 15, 2026

• Security headers and cookies: parser, weak values and per-attribute findings

  cerberauth/proxyaudit#34 · Filter by author emmanuelgautier opened on Nov 15, 2026

• TLS: hostname mismatch, self-signed, weak DH and legacy protocol probing

  cerberauth/proxyaudit#33 · Filter by author emmanuelgautier opened on Nov 15, 2026

• Reusable check pack: request factory, namespaced IDs and checks shared with vulnapi

  cerberauth/proxyaudit#32 · Filter by author emmanuelgautier opened on Nov 15, 2026

• Config-Level Static Analysis

  priority:P3scope:cfgtype:epic
  cerberauth/proxyaudit#16 · Filter by author emmanuelgautier opened on Sep 12, 2026 · v0.5 - Advanced/Optional