HA
Product
haproxy
39
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 3High 23Medium 7Low 1
Watch
Add haproxy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-0056 | 6.5 | Mar 23 | An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service Affected: All versions, or not specified |
| CVE-2019-11323 | 5.9 | May 9 | HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys Affected: 1.9.2 before 1.9.7 |
| CVE-2018-11469 | 5.9 | May 25 | Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 (if cache enabled) allows attackers to achieve information disclosure… Affected: 1.8.0 through 1.8.9 |
| CVE-2026-33555 | 5.8 | Apr 13 | An issue was discovered in HAProxy before 3.3.6 Affected: 2.6 before 3.3.6 |
| CVE-2021-39241 | 5.3 | Aug 17 | An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3 Affected: 2.0.0 before 2.0.24; 2.2.0 before 2.2.16; 2.3.0 before 2.3.13; 2.4.0 before 2.4.3 |
| CVE-2016-2102 | 5.3 | Aug 22 | HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network Affected: All versions, or not specified |
| CVE-2026-26081 | 4.8 | Jul 20 | HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format Affected: 3.0 before 3.0.12; 3.1 before 3.1.14; 3.2 before 3.2.12; 3.3 before 3.3.3 |
Showing 7