Login Request a demo
HA
Product
haproxy
by haproxy · last CVE Oct 22, 2026
39
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities39In the news0Timeline
Severity mix
Critical 3High 23Medium 7Low 1
Severity
All severities39Critical3High23Medium7Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add haproxy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-19330
9.8
4%
Nov 27
The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL,…
Affected: before 2.0.10
CVE-2026-55203
9.1
0%
Jun 18
HAProxy - Integer Overflow in FCGI Demux Record Length Field
Affected: through 3.4.0
CVE-2023-25725
9.1
5%
Feb 14
HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in…
Affected: before 2.0.31; 2.1.0 before 2.2.29; 2.3.0 before 2.4.22; 2.5.0 before 2.5.12; 2.6.0 before 2.6.9; 2.7.0 before 2.7.3
Showing 3