https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:53:49.085775+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05625 bdu:2026-05625 2026-10-04T00:53:49.153669+00:00 bdu:2026-05625 https://cve.radiocsirt.org/vuln/bit-apisix-2026-31908 BIT-apisix-2026-31908 — Apache APISIX: forward auth plugin allows header injection 2026-10-04T00:53:49.153714+00:00

Affected: Bitnami: apisix

Header injection vulnerability in Apache APISIX.

The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0.

Users are recommended to upgrade to version 3.16.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-291567 EUVD-2026-291567 2026-10-04T00:53:49.153753+00:00 EUVD-2026-291567 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31908 fkie_cve-2026-31908 2026-10-04T00:53:49.153767+00:00

Header injection vulnerability in Apache APISIX.

The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0.

Users are recommended to upgrade to version 3.16.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-jv22-34xc-w9x6 GHSA-jv22-34xc-w9x6 2026-10-04T00:53:49.153791+00:00

Header injection vulnerability in Apache APISIX.

The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0.

Users are recommended to upgrade to version 3.16.0, which fixes the issue.