TI-2026-39910 CVE-2026-55233
OpenResty: Buffer overflow when writing PROXY protocol v2 header to upstream
Priority LOW 39
OpenResty is a high performance web platform.
Vulnerabilities
6 records
TI-2024-26625 CVE-2024-39702 · GHSA-6px8-752j-c2vv
In lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function…
Priority LOW 27
In lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during string interning) allows HashDoS (Hash Denial of Service) attacks.
TI-2023-23979 CVE-2023-44487 · GHSA-qppj-fm5r-hxr3
The HTTP/2 protocol allows a denial of service (server resource consumption) because…
Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
TI-2021-05876 CVE-2021-23017 · GHSA-83p9-mcpm-374v
A security issue in nginx resolver was identified, which might allow an attacker who is…
Priority HIGH 66
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other…
TI-2020-09415 CVE-2020-11724 · GHSA-478m-xrv3-7r93
An issue was discovered in OpenResty before 1.15.8.4.
Priority LOW 38
An issue was discovered in OpenResty before 1.15.8.4.
TI-2018-06684 CVE-2018-9230 · GHSA-fgf7-9g3w-445r
In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.get_uri_args…
Priority MEDIUM 57
In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.get_uri_args and ngx.req.get_post_args functions that ignore parameters beyond the hundredth one, which might allow remote attackers to bypass…