Vulnerabilidades de HAProxy Kubernetes Ingress Controller (CVE)

Registros CVE publicados para HAProxy Kubernetes Ingress Controller, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

7.5Alta

CVE-2026-110353 hace 20 días

HAProxy HAProxy; HAProxy HAProxy Enterprise Edition; HAProxy Kubernetes Ingress Controller; Haproxy Kubernetes Ingress Controller Enterprise

HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame. h2c_handle_ping in src/mux_h2.c does not check for a short read, unlike the other H2 frame handler…

7.5Alta

CVE-2025-11230 hace 11 meses

Denial of service vulnerability in HAProxy mjson library

HAProxy Technologies HAProxy Community Edition

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.