Vendors / openresty Records 9 All Threatist records
Exploited (KEV) 1
CVSS critical 1
CVSS high 5
Exploited now openresty records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request.
CVSS 3.1 HIGH 7.7· Network · No auth · No interaction · EPSS 0.00852 · Published 2025-04-22 · No fix listed CWE-444
Priority LOW 27
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01423 · Published 2021-04-06 · No fix listed
Open these records in search → All records by CVSS severity
1 5 3 0 0
