Apache Community

Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion

Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode

Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins

Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash

Apache Traffic Server: txn_box plugin overflows the stack from attacker input

Apache Traffic Server: regex_remap plugin overflows the stack from attacker input

Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery

Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free

Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

Apache Traffic Server: Out-of-bounds reads while parsing DNS responses