Read the docs

HAProxy

Records43All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

HAProxy records in CISA KEV

No HAProxy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Haproxy 36 records HIGH Haproxy Enterprise 3 records MEDIUM Aloha 2 records LOW Aloha Appliance 1 record MEDIUM Kubernetes Ingress Controller 1 record MEDIUM Proxyprotocol 1 record MEDIUM

Records

1 record in Kubernetes Ingress Controller · all components

TI-2025-10285 CVE-2025-11230 · GHSA-fc36-5gc3-jmhx

Denial of service vulnerability in HAProxy mjson library

Priority MEDIUM 40

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0074 Published 2025-11-19 Partial fix · 2.4.30, 2.6.23 +4 CWE-407
Open these records in search →