https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T03:59:53.146050+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-06892 bdu:2022-06892 2026-10-19T03:59:53.152649+00:00 bdu:2022-06892 https://cve.radiocsirt.org/vuln/bit-haproxy-2021-39240 BIT-haproxy-2021-39240 2026-10-19T03:59:53.152682+00:00

Affected: Bitnami: haproxy

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that the scheme and path portions of a URI have the expected characters. For example, the authority field (as observed on a target HTTP/2 server) might differ from what the routing rules were intended to achieve.

 https://cve.radiocsirt.org/vuln/euvd-2026-30532 EUVD-2026-30532 2026-10-19T03:59:53.152711+00:00 EUVD-2026-30532 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39240 fkie_cve-2021-39240 2026-10-19T03:59:53.152725+00:00

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that the scheme and path portions of a URI have the expected characters. For example, the authority field (as observed on a target HTTP/2 server) might differ from what the routing rules were intended to achieve.

 https://cve.radiocsirt.org/vuln/ghsa-88gq-424p-x3xc GHSA-88gq-424p-x3xc 2026-10-19T03:59:53.152745+00:00

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that the scheme and path portions of a URI have the expected characters. For example, the authority field (as observed on a target HTTP/2 server) might differ from what the routing rules were intended to achieve.

 https://cve.radiocsirt.org/vuln/gsd-2021-39240 gsd-2021-39240 2026-10-19T03:59:53.152760+00:00 gsd-2021-39240 https://cve.radiocsirt.org/vuln/oesa-2021-1333 OESA-2021-1333 — haproxy security update 2026-10-19T03:59:53.152770+00:00

Affected: openEuler:20.03-LTS-SP1: haproxy, openEuler:20.03-LTS-SP2: haproxy

HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world's most visited ones. Security Fix(es): An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that the scheme and path portions of a URI have the expected characters. For example, the authority field (as observed on a target HTTP/2 server) might differ from what the routing rules were intended to achieve.(CVE-2021-39240) An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. An HTTP method name may contain a space followed by the name of a protected resource. It is possible that a server would interpret this as a request for that protected resource, such as in the "GET /admin? HTTP/1.1 /static/images HTTP/1.1" example.(CVE-2021-39241) An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situation with an attacker-controlled HTTP Host header, because a mismatch between Host and authority is mishandled.(CVE-2021-39242)

 https://cve.radiocsirt.org/vuln/rhsa-2021:4118 RHSA-2021:4118 — Red Hat Security Advisory: OpenShift Container Platform 4.9.6 packages and security update 2026-10-19T03:59:53.152801+00:00

haproxy: does not ensure that the scheme and path portions of a URI have the expected characters haproxy: an HTTP method name may contain a space followed by the name of a protected resource haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled haproxy: request smuggling attack or response splitting via duplicate content-length header

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2456 WID-SEC-W-2023-2456 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-19T03:59:53.152821+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Dateien zu manipulieren oder Informationen offenzulegen.