| CVE-2026-31908 |
Header injection vulnerability in Apache APISIX
|
Non notée
|
14 avr. 2026 |
| CVE-2025-62232 |
Sensitive data exposure via logging in basic-auth leads to plaintext usernames and passwords written to error logs and…
|
Non notée
|
31 oct. 2025 |
| CVE-2025-46647 |
A vulnerability of plugin openid-connect in Apache APISIX
|
Non notée
|
2 juil. 2025 |
| CVE-2024-32638 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Apache APISIX when using…
|
Non notée
|
2 mai 2024 |
| CVE-2022-29266 |
In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the…
|
Non notée
|
20 avr. 2022 |
| CVE-2022-25757 |
In Apache APISIX before 2.13.0, when decoding JSON with duplicate keys, lua-cjson will choose the last occurred value as…
|
Non notée
|
28 mars 2022 |
| CVE-2022-24112 |
Exploitée
Apache APISIX Authentication Bypass Vulnerability
|
Non notée
|
11 févr. 2022 |
| CVE-2021-43557 |
The uri-block plugin in Apache APISIX before 2.10.2 uses $request_uri without verification
|
Non notée
|
22 nov. 2021 |
| CVE-2020-13945 |
In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules
|
Non notée
|
7 déc. 2020 |