OP
Product
openresty
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add openresty to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-9230 | 9.8 | Apr 2 | In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.get_uri_args and ngx.req.get_post_args functions that ignore parameters beyond the hundredth one,… Affected: before 1.13.6.1 |
| CVE-2021-23017 | 7.7 | Jun 1 | A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting… Affected: before 1.19.3.2 |
| CVE-2026-55233 | 7.5 | Jul 10 | OpenResty: Buffer overflow when writing PROXY protocol v2 header to upstream Affected: >= 1.29.2.1, < 1.29.2.5 |
| CVE-2020-11724 | 7.5 | Apr 12 | An issue was discovered in OpenResty before 1.15.8.4 Affected: before 1.15.8.4 |
| CVE-2024-39702 | 5.9 | Jul 23 | In lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during string interning) allows HashDoS (Hash Denial of Service) attacks Affected: 1.19.3.1 before 1.19.9.2; 1.21.4.1 before 1.21.4.4; 1.25.3.1 |
Showing 5