Skip to content
Openresty vulnerabilities
Newest
-
openresty lua-resty-dns
OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing
CVE-2026-116013
6.3 Medium
-
openresty
OpenResty: Buffer overflow when writing PROXY protocol v2 header to upstream
CVE-2026-55233
7.5 High
-
openresty lua-nginx-module
An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct...
CVE-2024-33452
Fix available
7.7 High
-
openresty
In lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during...
CVE-2024-39702
5.9 Medium
-
eclipse jetty, ietf http, http/2 +166 more +168 more
Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
CVE-2023-44487
In KEVPublic exploitFix available
EPSS 100.0%
7.5 High
-
f5 nginx, fedoraproject fedora, netapp ontap select deploy administration utility +10 more +12 more
A security issue in nginx resolver was identified, which might allow an attacker who is able to...
CVE-2021-23017
Public exploitFix available
EPSS 53.5%
7.7 High
-
openresty lua-nginx-module
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters...
CVE-2020-36309
Fix available
5.3 Medium
-
openresty, debian linux +1 more
An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP...
CVE-2020-11724
Fix available
7.5 High
-
openresty
** DISPUTED ** In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req...
CVE-2018-9230
Disputed
EPSS 13.2%
9.8 Critical