AP
Product
APISIX
by Apache · last CVE Aug 27, 2026
On CISA KEVExploited in the wild
29
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 14Medium 8Low 0
Watch

Add APISIX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-24112
In wildKEV
9.8
96%
Feb 11
apisix/batch-requests plugin allows overwriting the X-REAL-IP header
Affected: before 2.10.4; 2.11.0 before 2.12.1
Showing 1