Where
-Infinity
0

Trending

Last week
Last month
Last year

Apache Apache APISIXApache APISIX: forward auth plugin allows header injection

Risk 70
Severity
9.1
First published (updated )
CVE-2026-31908

Apache APISIXApache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTP

Risk 30
Severity
5.3
First published (updated )
CVE-2026-31924

Apache APISIXApache APISIX: Openid-connect `tls_verify` field is disabled by default

Risk 46
Severity
7.5
First published (updated )
CVE-2026-31923

oss-secCVE-2026-31908: Apache APISIX: forward auth plugin allows header injection

First published (updated )
https://seclists.org/oss-sec/2026/q2/127

oss-secCVE-2026-31924: Apache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTP

First published (updated )
https://seclists.org/oss-sec/2026/q2/126
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache APISIX Java Plugin RunnerApache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges

Risk 74
Severity
7.8
First published (updated )
CVE-2025-27446

CVE-2024-32638: Apache APISIX: Forward-Auth Request Smuggling

First published (updated )
https://seclists.org/oss-sec/2024/q2/200

Apache APISIXApache APISIX: Forward-Auth Request Smuggling

Risk 33
Severity
6.3
EPSS
0.04%
First published (updated )
CVE-2024-32638

Apache Tomcat- Rapid Reset HTTP/2 vulnerability

Risk 65
Severity
7.5
Exploited
Zeroday
First published (updated )
CVE-2023-44487

Apache APISIXapisix/jwt-auth may leak secrets in error response

Risk 43
Severity
7.5
First published (updated )
CVE-2022-29266
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache APISIXApache APISIX: the body_schema check in request-validation plugin can be bypassed

Risk 86
Severity
9.8
First published (updated )
CVE-2022-25757

Apache APISIXApache APISIX Authentication Bypass Vulnerability

Risk 99
Severity
9.8
Exploited
First published (updated )
CVE-2022-24112

Apache APISIXPath traversal in request_uri variable

Risk 43
Severity
7.5
First published (updated )
CVE-2021-43557

Apache APISIXIn Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rul…

Risk 38
Severity
6.5
First published (updated )
CVE-2020-13945

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203