Vulnerabilidades de HAProxy Technologies HAProxy Kubernetes Ingress Controller (CVE)

Registros CVE publicados para HAProxy Technologies HAProxy Kubernetes Ingress Controller, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

7.5Alta

CVE-2026-110354 hace 17 días

HAProxy HAProxy; HAProxy HAProxy Enterprise Edition; HAProxy Technologies HAProxy Kubernetes Ingress Controller; HAProxy Technologies Kubernetes Ingress Controller Enterprise

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeat…

6.4Media

CVE-2025-59303 hace 1 año

HAProxy HAProxy Kubernetes Ingress Controller

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HA…