Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials

Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_client STRICT enforcement

Apache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the origin

Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration

Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates

Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smuggling

Apache Traffic Server: Malformed chunked message body allows request smuggling

Apache Traffic Server: Use-after-free in the intercept plugin

Apache Traffic Server: regex_remap plugin overflows the stack from attacker input

Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling

Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out

Apache Traffic Server: SNI to Host header matching policy is not properly enforced

Apache Traffic Server: Header-name length truncation enables header aliasing and request smuggling

Apache Traffic Server: SNI to Host header matching policy is not properly enforced

Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata

Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication

Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling

Apache Traffic Server: Memory-safety errors in MIME and header parsing

Apache Traffic Server: An unread Expect: 100-continue request body is framed as a new request

Apache Traffic Server: Improper server-session reuse can expose data across client connections

Apache Traffic Server: HTTP/2 DATA frame padding underflow lets a client trigger backend worker-pool exhaustion

Apache Traffic Server: HTTP/2 Content-Length truncation lets a client trigger backend worker-pool exhaustion

Apache Traffic Server: ts_lua plugin has initialization and resource-handling errors

Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely

Apache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDs

Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins

Apache Traffic Server: Listener and ACL handling allow access-control bypass

Apache Traffic Server: Unthrottled per-header diagnostic logging enables a log-flood denial of service

Apache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification

Apache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service

Apache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses

Apache Traffic Server: header_rewrite plugin cookie handling can corrupt memory

Apache Traffic Server: prefetch plugin can crash on attacker-influenced input

Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash

Apache Traffic Server: txn_box plugin overflows the stack from attacker input

Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery

Apache Traffic Server: HostDB SRV handling leaks memory

Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free

Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server

Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion

Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the server

Apache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions

Apache Traffic Server: Malformed chunked message body allows request smuggling

Apache Traffic Server: A simple legitimate POST request causes a crash

Improper HTTP/2 scheme and method validation

Improper input validation on HTTP/2 headers

HTTP/2 framing vulnerabilities

Protocol vs scheme mismatch