Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache traffic serverApache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responsesCVE-2026-581868.2 High
- apache traffic serverApache Traffic Server: Use-after-free in the intercept pluginCVE-2026-581858.2 High
- apache traffic serverApache Traffic Server: header_rewrite plugin cookie handling can corrupt memoryCVE-2026-581848.3 High
- apache traffic serverApache Traffic Server: prefetch plugin can crash on attacker-influenced inputCVE-2026-581838.2 High
- apache traffic serverApache Traffic Server: ts_lua plugin has initialization and resource-handling errorsCVE-2026-581828.2 High
- apache traffic serverApache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crashCVE-2026-581818.2 High
- apache traffic serverApache Traffic Server: txn_box plugin overflows the stack from attacker inputCVE-2026-581808.2 High
- apache traffic serverApache Traffic Server: regex_remap plugin overflows the stack from attacker inputCVE-2026-581799.2 Critical
- apache traffic serverApache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgeryCVE-2026-581788.2 High
- apache traffic serverApache Traffic Server: Memory-safety and path-traversal errors in the Cripts frameworkCVE-2026-581778.3 High
- apache traffic serverApache Traffic Server: HostDB SRV handling leaks memoryCVE-2026-581758.2 High
- apache traffic serverApache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-freeCVE-2026-581648.3 High
- apache traffic serverApache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the serverCVE-2026-581638.3 High
- apache traffic serverApache Traffic Server: Certifier plugin trusts client SNI when generating certificatesCVE-2026-581628.4 High
- apache traffic serverApache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the serverCVE-2026-581619.2 Critical
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB auth manager: JWT signature verification disabled by default for Azure AD OAuth (`verify_signature` defaults to `False`)CVE-2026-59243Public exploit9.8 Critical
- apache traffic serverApache Traffic Server: Out-of-bounds reads while parsing DNS responsesCVE-2026-581606.3 Medium
- apache traffic serverApache Traffic Server: Listener and ACL handling allow access-control bypassCVE-2026-581597.0 High
- apache traffic serverApache Traffic Server: PROXY protocol parsing has port truncation and a stack overflowCVE-2026-581588.2 High
- apache traffic serverApache Traffic Server: Improper server-session reuse can expose data across client connectionsCVE-2026-581576.9 Medium
- apache traffic serverApache Traffic Server: URL and port parsing errors allow access-control bypassCVE-2026-581566.3 Medium
- apache traffic serverApache Traffic Server: Header-name length truncation enables header aliasing and request smugglingCVE-2026-581559.2 Critical
- apache traffic serverApache Traffic Server: Memory-safety errors in MIME and header parsingCVE-2026-581549.2 Critical
- apache traffic serverApache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verificationCVE-2026-653256.3 Medium
- apache traffic serverApache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustionCVE-2026-653248.2 High
- apache traffic serverApache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafelyCVE-2026-581536.3 Medium
- apache traffic serverApache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memoryCVE-2026-581526.9 Medium
- apache traffic serverApache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the serverCVE-2026-581518.7 High
- apache traffic serverApache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smugglingCVE-2026-581507.8 High
- apache traffic serverApache Traffic Server: Malformed chunked message body allows request smugglingCVE-2026-578347.0 High
- apache traffic serverApache Traffic Server: Buffer overflow via Host field that has a long string valueCVE-2026-339308.2 High
- apache traffic serverApache Traffic Server: Request smuggling via chunked extension quoted-string parsingCVE-2026-240336.9 Medium
- apache traffic serverApache Traffic Server: Untrusted @ headers can spoof ATS internal metadataCVE-2026-33267Public exploit7.7 High
- apache traffic serverApache Traffic Server: Regex mappings match with malicious domain namesCVE-2026-220686.9 Medium
- apache traffic serverApache Traffic Server: SNI to Host header matching policy is not properly enforcedCVE-2026-419207.0 High
- apache tomcatApache Tomcat: DoS via WebSocket chat exampleCVE-2026-66299Fix available5.3 Medium
- apache software foundation axis2/java, apache axis2\/java +1 moreApache Axis2/Java: deserialization of untrusted DataCVE-2026-667139.8 Critical
- apache activemq, activemq all, activemq amqp +2 moreApache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoSCVE-2026-59878Fix available7.5 High
- apache activemq, activemq all, activemq broker +2 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinationsCVE-2026-61487Fix available6.5 Medium
- apache wicketApache Wicket: leaked and missing CSP headersCVE-2026-663916.5 Medium
- apache wicketApache Wicket: crafted Link URL strings can break out of the JavaScript sequenceCVE-2026-663906.1 Medium
- apache thriftApache Thrift: Python TSSLSocket Hostname Matcher ImportCVE-2026-66053Fix available5.9 Medium
- apache thriftApache Thrift: C++ THeaderTransport::readString() info-header length bounds bypassCVE-2026-58662Fix available8.7 High
- apache thriftApache Thrift: Rust binary protocol non-strict path missing string size limitCVE-2026-58389Fix available8.7 High
- apache thriftApache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes pathCVE-2026-58023Fix available6.9 Medium
- apache thriftApache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()CVE-2026-55971Fix available9.3 Critical
- apache thriftApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()CVE-2026-55970Fix available6.9 Medium
- apache thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()CVE-2026-55969Fix available8.7 High
- apache thriftApache Thrift: Node.js quadratic-time DoS in server receive transportsCVE-2026-55968Fix available8.7 High
- apache thriftApache Thrift: Ruby THeaderTransport ZLIB Decompression BombCVE-2026-49158Fix available7.5 High
- Show moreLoading…