Cloud Foundry Routing vulnerabilities

• sensiolabs symfony, cloud foundry routing +1 more Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization CVE-2026-48784 Fix available 5.1 MediumJune 15, 2026
• cloud foundry routing release, cloudfoundry cf-deployment +1 more GoRouter Denial of Service Attack CVE-2024-22279 5.9 MediumJune 10, 2024
• cloud foundry routing release, pivotal cloud foundry deployment, cloud foundry routing release +1 more +3 more CVE-2023-34061 – Gorouter route pruning CVE-2023-34061 7.5 HighJanuary 12, 2024
• cloud foundry routing, cf deployment, cloudfoundry cf-deployment +1 more +3 more CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter CVE-2023-34041 5.3 MediumSeptember 8, 2023
• cloud foundry routing, cloudfoundry gorouter, cloud foundry cf deployment +1 more +3 more Gorouter is vulnerable to DoS attack via invalid HTTP responses CVE-2020-5420 7.7 HighSeptember 3, 2020
• cloud foundry routing, cf deployment, cloudfoundry cf-deployment +1 more +3 more CF clusters with NGINX in front of them may be vulnerable to DoS CVE-2020-5416 7.7 HighAugust 21, 2020
• cloud foundry routing, cloudfoundry routing release +1 more Cloud Foundry GoRouter is vulnerable to cache poisoning CVE-2020-5401 5.3 MediumFebruary 27, 2020
• cloud foundry routing, cloudfoundry cf-deployment, routing-release +2 more A forged route service request using an invalid nonce can cause the gorouter to panic and crash CVE-2019-11289 Fix available 8.6 HighNovember 19, 2019
• cloudfoundry routing release, cloud foundry cf routing +1 more Gorouter allows space developer to hijack route services hosted outside the platform CVE-2019-3789 8.8 HighApril 24, 2019
• [unknown] routing, redhat openshift container platform +1 more routing before version 3.10 is vulnerable to an improper input validation of the Openshift... CVE-2018-1070 6.5 MediumJune 12, 2018