TI-2026-52576 CVE-2026-74848 · GHSA-3g86-xcpq-wppj
Apache APISIX: Cross-user response poisoning in serverless plugins
Priority LOW 32
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX.
Vulnerabilities
29 records
TI-2026-52703 CVE-2026-75005 · GHSA-7p87-32cx-94g2
Apache APISIX: Unauthenticated CPU-exhaustion DoS
Priority MEDIUM 45
Inefficient Algorithmic Complexity vulnerability in Apache APISIX.
TI-2026-52716 CVE-2026-75020 · GHSA-fm68-53hc-8wxg
Apache APISIX: ldap-auth plugin cross-subtree identity impersonation
Priority LOW 32
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX.
TI-2026-45017 CVE-2026-63041 · GHSA-h244-w3g4-3cv4
Apache APISIX: attach-consumer-label does not strip client-supplied consumer-label headers
Priority LOW 25
Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX.
TI-2026-36772 CVE-2026-49872 · GHSA-cxx6-444w-8847
Apache APISIX: Improper authentication in cas-auth plugin
Priority LOW 25
Improper Authentication vulnerability in Apache APISIX.
TI-2026-36771 CVE-2026-49871 · GHSA-rrqp-g94p-gmh7
Apache APISIX: cas-auth login CSRF / session injection issue
Priority LOW 11
Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default configurations.
TI-2026-34916 CVE-2026-47341 · GHSA-9hp8-p9xx-frx5
Apache APISIX: Session replay issue in hmac-auth
Priority LOW 35
Authentication Bypass by Capture-replay vulnerability in Apache APISIX.
TI-2026-36155 CVE-2026-48895 · GHSA-q562-qrm6-7p84
Apache APISIX: Cas-auth Host header influence on CAS service URL
Priority LOW 12
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX.
TI-2026-36432 CVE-2026-49231 · GHSA-3cm7-pvjf-2x7q
Apache APISIX: Identity spoofing issue in APISIX opa plugin
Priority LOW 13
Authentication Bypass by Spoofing vulnerability in opa plugin.
TI-2026-36431 CVE-2026-49230 · GHSA-3mg6-56vq-7899
Apache APISIX: Authentication bypass in jwe-decrypt
Priority LOW 34
Improper Validation of Integrity Check Value vulnerability in Apache APISIX.
TI-2026-32785 CVE-2026-44915 · GHSA-2pmh-ppc3-5j39
Apache APISIX: Cas-auth plugin open redirect via unsanitized cookie value
Priority LOW 12
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX.
TI-2026-32103 CVE-2026-44087 · GHSA-4v22-j8v6-qgvh
Apache APISIX: Openid-connect plugin Identity Header Spoofing
Priority LOW 30
Insufficient Verification of Data Authenticity vulnerability in Apache APISIX.
TI-2026-34914 CVE-2026-47339 · GHSA-2455-m68h-qwxv
Apache APISIX: authz-casdoor incorrect session sharing
Priority LOW 30
Incorrect Authorization vulnerability in Apache APISIX.
TI-2026-32071 CVE-2026-44046 · GHSA-pmhp-pr8x-258q
Apache APISIX: wolf-rbac plugin Identity Spoofing
Priority LOW 13
Use of Less Trusted Source vulnerability in Apache APISIX.
TI-2026-28842 CVE-2026-39999 · GHSA-pw26-hvcp-w6vj
Apache APISIX: JWT Algorithm Confusion allows authentication bypass
Priority LOW 38
Authentication Bypass by Spoofing vulnerability in Apache APISIX.
TI-2026-28841 CVE-2026-39998 · GHSA-86hq-f9pp-3cr9
Apache APISIX: Identity Injection via forward-auth Plugin Missing Header Cleanup
Priority LOW 33
Improper Input Validation vulnerability in Apache APISIX.
TI-2026-24472 CVE-2026-31923 · GHSA-j648-xxf5-44cv
Apache APISIX: Openid-connect `tls_verify` field is disabled by default
Priority LOW 38
Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.
TI-2026-24473 CVE-2026-31924 · GHSA-ww73-h4g4-66vr
Apache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTP
Priority LOW 30
Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.
TI-2026-24457 CVE-2026-31908 · GHSA-jv22-34xc-w9x6
Apache APISIX: forward auth plugin allows header injection
Priority MEDIUM 48
Header injection vulnerability in Apache APISIX.
TI-2025-38542 CVE-2025-62232 · GHSA-3h2w-68px-r4v5
Apache APISIX: basic-auth logs plaintext credentials at info level
Priority LOW 39
Sensitive data exposure via logging in basic-auth leads to plaintext usernames and passwords written to error logs and forwarded to log sinks when log level is INFO/DEBUG.
TI-2025-20281 CVE-2025-27446 · GHSA-xm8v-g828-5x9r
Incorrect permission assignment in Apache APISIX Java Plugin Runner
Priority LOW 35
Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner).
TI-2025-29345 CVE-2025-46647 · GHSA-495r-5j65-5hp3
Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect
Priority LOW 25
A vulnerability of plugin openid-connect in Apache APISIX.
TI-2024-21520 CVE-2024-32638 · GHSA-8g74-32fg-5ghc
Apache APISIX: Forward-Auth Request Smuggling
Priority LOW 30
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Apache APISIX when using `forward-auth` plugin.This issue affects Apache APISIX: from 3.8.0, 3.9.0.
TI-2023-23979 CVE-2023-44487 · GHSA-qppj-fm5r-hxr3
The HTTP/2 protocol allows a denial of service (server resource consumption) because…
Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
TI-2022-11804 CVE-2022-29266 · GHSA-x46m-gg6j-22gf
apisix/jwt-auth may leak secrets in error response
Priority MEDIUM 44
In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the error message returned from the dependency lua-resty-jwt contains sensitive information.