haproxy haproxy enterprise vulnerabilities (CVE)

CVE records published for haproxy haproxy enterprise, newest first. Follow to get an email when a new one appears.

3 results

4.8Medium

CVE-2026-26081 3 months ago

HAProxy HAProxy

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.

3.7Low

CVE-2026-26080 3 months ago

HAProxy HAProxy

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.

7.5High

CVE-2025-11230 11 months ago

Denial of service vulnerability in HAProxy mjson library

HAProxy Technologies HAProxy Community Edition

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.