HA
Vendor
haproxy
53
CVEs
0
On KEV
8
New 30D
Products
HA9.8
haproxy
haproxy
39 CVEs0 on KEV2 new
DP9.8
Data Plane API CE
HAProxy
1 CVEs0 on KEV1 new
DP9.8
Data Plane API EE
HAProxy
1 CVEs0 on KEV1 new
HE7.5
HAProxy Enterprise Edition
HAProxy
2 CVEs0 on KEV2 new
KI7.5
Kubernetes Ingress Controller
HAProxy
2 CVEs0 on KEV1 new
KI7.5
Kubernetes Ingress Controller Enterprise
Haproxy
1 CVEs0 on KEV1 new
HE7.5
Haproxy Enterprise
Haproxy
3 CVEs0 on KEV0 new
AL4.8
Aloha
Haproxy
2 CVEs0 on KEV0 new
AA7.5
Aloha Appliance
Haproxy
1 CVEs0 on KEV0 new
PR7.5
Proxyprotocol
Haproxy
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110353 New | HA HAProxy HAProxy | 7.5 | Oct 22 | HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame |
| CVE-2026-110354 New | HE HAProxy Enterprise Edition HAProxy | 7.5 | Oct 22 | HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request |
| CVE-2026-109575 | DP Data Plane API EE HAProxy | 9.8 | Oct 12 | In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops… |
| CVE-2026-90678 | HA HAProxy HAProxy | 7.5 | Sep 13 | An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5 |
| CVE-2026-26081 | HA HAProxy HAProxy | 4.8 | Jul 20 | HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format |
| CVE-2026-26080 | HA HAProxy HAProxy | 3.7 | Jul 20 | HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled |
| CVE-2026-55204 | HA haproxy haproxy | 7.5 | Jun 18 | HAProxy - NULL Pointer Dereference in hpack_dht_insert Function |
| CVE-2026-55203 | HA haproxy haproxy | 9.1 | Jun 18 | HAProxy - Integer Overflow in FCGI Demux Record Length Field |
| CVE-2026-33555 | HA HAProxy HAProxy | 5.8 | Apr 13 | An issue was discovered in HAProxy before 3.3.6 |
| CVE-2025-11230 | KI Kubernetes Ingress Controller Haproxy | 7.5 | Nov 19 | Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests |
| CVE-2024-45506 | HA Haproxy Haproxy | 7.5 | Sep 4 | HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding (h2_send loop) under a certain set of… |
| CVE-2023-45539 | HA Haproxy Haproxy | 8.2 | Nov 28 | HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon… |
| CVE-2023-40225 | HA Haproxy Haproxy | 7.2 | Aug 10 | HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty… |
| CVE-2023-25950 | HA Haproxy Haproxy | 7.3 | Apr 11 | HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request |
| CVE-2023-0836 | HA Haproxy Haproxy | 7.5 | Mar 29 | An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1 |
| CVE-2023-0056 | HA Haproxy Haproxy | 6.5 | Mar 23 | An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service |
| CVE-2023-25725 | HA Haproxy Haproxy | 9.1 | Feb 14 | HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in… |
| CVE-2022-0711 | HA Haproxy Haproxy | 7.5 | Mar 2 | A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header |
| CVE-2021-40346 | HA Haproxy Haproxy | 7.5 | Sep 8 | An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all… |
| CVE-2021-39242 | HA Haproxy Haproxy | 7.5 | Aug 17 | An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3 |
| CVE-2021-39241 | HA Haproxy Haproxy | 5.3 | Aug 17 | An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3 |
| CVE-2021-39240 | HA Haproxy Haproxy | 7.5 | Aug 17 | An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3 |
| CVE-2020-11100 | HA Haproxy Haproxy | 8.8 | Apr 2 | In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap… |
| CVE-2019-19330 | HA Haproxy Haproxy | 9.8 | Nov 27 | The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL,… |
| CVE-2019-18277 | HA Haproxy Haproxy | 7.5 | Oct 23 | A flaw was found in HAProxy before 2.0.6 |
| CVE-2019-14243 | PR Proxyprotocol Haproxy | 7.5 | Jul 23 | headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, allows remote attackers to cause a… |
| CVE-2019-14241 | HA Haproxy Haproxy | 7.5 | Jul 23 | HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c |
| CVE-2019-11323 | HA Haproxy Haproxy | 5.9 | May 9 | HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys |
| CVE-2018-20615 | HA Haproxy Haproxy | 7.5 | Mar 18 | An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash |
| CVE-2018-20103 | HA Haproxy Haproxy | 7.5 | Dec 12 | An issue was discovered in dns.c in HAProxy through 1.8.14 |
| CVE-2018-20102 | HA Haproxy Haproxy | 7.5 | Dec 12 | An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14 |
| CVE-2018-14645 | HA Haproxy Haproxy | 7.5 | Sep 21 | A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2 |
| CVE-2018-11469 | HA Haproxy Haproxy | 5.9 | May 25 | Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 (if cache enabled) allows attackers to achieve information disclosure… |
| CVE-2018-10184 | HA Haproxy Haproxy | 7.5 | May 9 | An issue was discovered in HAProxy before 1.8.8 |
| CVE-2016-2102 | HA Haproxy Haproxy | 5.3 | Aug 22 | HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network |
| CVE-2016-5360 | HA Haproxy Haproxy | 7.5 | Jun 30 | HAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, allows remote attackers to cause a denial of service (uninitialized memory access and crash) or possibly have… |
| CVE-2015-3281 | HA Haproxy Haproxy | – | Jul 6 | The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote… |
| CVE-2014-6269 | HA Haproxy Haproxy | – | Sep 30 | Multiple integer overflows in the http_request_forward_body function in proto_http.c in HAProxy 1.5-dev23 before 1.5.4 allow remote attackers to cause a denial of service (crash)… |
| CVE-2013-2175 | HA Haproxy Haproxy | – | Aug 19 | HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers to cause a… |
| CVE-2013-1912 | HA Haproxy Haproxy | – | Apr 10 | Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite… |
| CVE-2012-2942 | HA Haproxy Haproxy | – | May 27 | Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21, when global.tune.bufsize is set to a value greater than the default and header… |