OP
Vendor
openresty
8
CVEs
0
On KEV
1
New 30D
Products
LU3.7
lua-resty-dns
openresty
1 CVEs0 on KEV1 new
OP9.8
openresty
openresty
5 CVEs0 on KEV0 new
LU7.7
Lua-nginx-module
Openresty
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116013 New | LU lua-resty-dns openresty | 3.7 | Oct 24 | OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing |
| CVE-2026-55233 | OP openresty openresty | 7.5 | Jul 10 | OpenResty: Buffer overflow when writing PROXY protocol v2 header to upstream |
| CVE-2024-33452 | LU Lua-nginx-module Openresty | 7.7 | Apr 22 | An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request |
| CVE-2024-39702 | OP Openresty Openresty | 5.9 | Jul 23 | In lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during string interning) allows HashDoS (Hash Denial of Service) attacks |
| CVE-2021-23017 | OP Openresty Openresty | 7.7 | Jun 1 | A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting… |
| CVE-2020-36309 | LU Lua-nginx-module Openresty | 5.3 | Apr 6 | ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header |
| CVE-2020-11724 | OP Openresty Openresty | 7.5 | Apr 12 | An issue was discovered in OpenResty before 1.15.8.4 |
| CVE-2018-9230 | OP Openresty Openresty | 9.8 | Apr 2 | In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.get_uri_args and ngx.req.get_post_args functions that ignore parameters beyond the hundredth one,… |