| CVE-2026-24033 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Traffic Server
|
7.2
High
|
Jul 29, 2026 |
| CVE-2026-33267 |
Improper Input Validation vulnerability in Apache Traffic Server
|
10.0
Critical
|
Jul 29, 2026 |
| CVE-2026-22068 |
Regular Expression without Anchors vulnerability in Apache Traffic Server
|
8.2
High
|
Jul 29, 2026 |
| CVE-2026-41920 |
Improper Access Control vulnerability in Apache Traffic Server
|
9.3
Critical
|
Jul 29, 2026 |
| CVE-2026-59173 |
Uncontrolled Resource Consumption vulnerability in Apache Traffic Server
|
Not rated
|
Jul 18, 2026 |
| CVE-2025-65114 |
Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic…
|
Not rated
|
Apr 2, 2026 |
| CVE-2025-58136 |
A bug in POST request handling causes a crash under a certain condition
|
Not rated
|
Apr 2, 2026 |
| CVE-2025-31698 |
ACL configured in ip_allow.config or remap.config does not use IP addresses that are provided by PROXY protocol
|
Not rated
|
Jun 19, 2025 |
| CVE-2025-49763 |
ESI plugin does not have the limit for maximum inclusion depth, and that allows excessive memory consumption if…
|
Not rated
|
Jun 19, 2025 |
| CVE-2024-53868 |
Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic…
|
Not rated
|
Apr 3, 2025 |
| CVE-2024-38311 |
Improper Input Validation vulnerability in Apache Traffic Server
|
Not rated
|
Mar 6, 2025 |
| CVE-2024-56195 |
Improper Access Control vulnerability in Apache Traffic Server
|
Not rated
|
Mar 6, 2025 |
| CVE-2024-56196 |
Improper Access Control vulnerability in Apache Traffic Server
|
Not rated
|
Mar 6, 2025 |
| CVE-2024-56202 |
Expected Behavior Violation vulnerability in Apache Traffic Server
|
Not rated
|
Mar 6, 2025 |
| CVE-2024-50306 |
Unchecked return value can allow Apache Traffic Server to retain privileges on startup
|
Not rated
|
Nov 14, 2024 |
| CVE-2024-50305 |
Valid Host header field can cause Apache Traffic Server to crash on some platforms
|
Not rated
|
Nov 14, 2024 |
| CVE-2024-38479 |
Improper Input Validation vulnerability in Apache Traffic Server
|
Not rated
|
Nov 14, 2024 |
| CVE-2023-38522 |
Apache Traffic Server accepts characters that are not allowed for HTTP field names and forwards malformed requests to…
|
Not rated
|
Jul 26, 2024 |
| CVE-2024-35296 |
Invalid Accept-Encoding header can cause Apache Traffic Server to fail cache lookup and force forwarding requests
|
Not rated
|
Jul 26, 2024 |
| CVE-2024-35161 |
Apache Traffic Server forwards malformed HTTP chunked trailer section to origin servers
|
Not rated
|
Jul 26, 2024 |
| CVE-2024-31309 |
HTTP/2 CONTINUATION DoS attack can cause Apache Traffic Server to consume more resources on the server. Version from…
|
Not rated
|
Apr 10, 2024 |
| CVE-2023-39456 |
Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames.This issue affects…
|
Not rated
|
Oct 17, 2023 |
| CVE-2023-41752 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Traffic Server.This issue affects…
|
Not rated
|
Oct 17, 2023 |
| CVE-2023-33934 |
Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache…
|
Not rated
|
Aug 9, 2023 |
| CVE-2022-47185 |
Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This…
|
Not rated
|
Aug 9, 2023 |