Read the docs
Red Hat Security Advisory

RHSA-2025:21693

haproxy security update

Released 2025-11-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 40

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0074 Published 2025-11-19 Partial fix · 2.4.30, 2.6.23 +4 CWE-407