https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:52:27.984746+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-05797 bdu:2024-05797 2026-10-10T21:52:27.991931+00:00 bdu:2024-05797 https://cve.radiocsirt.org/vuln/cnvd-2024-35169 cnvd-2024-35169 2026-10-10T21:52:27.991963+00:00 cnvd-2024-35169 https://cve.radiocsirt.org/vuln/euvd-2026-258452 EUVD-2026-258452 2026-10-10T21:52:27.991977+00:00 EUVD-2026-258452 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38522 fkie_cve-2023-38522 2026-10-10T21:52:27.991989+00:00

Apache Traffic Server accepts characters that are not allowed for HTTP field names and forwards malformed requests to origin servers. This can be utilized for request smuggling and may also lead cache poisoning if the origin servers are vulnerable.

This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4.

Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-68qf-xhq3-9qj5 GHSA-68qf-xhq3-9qj5 2026-10-10T21:52:27.992059+00:00

Apache Traffic Server accepts characters that are not allowed for HTTP field names and forwards malformed requests to origin servers. This can be utilized for request smuggling and may also lead cache poisoning if the origin servers are vulnerable.

This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4.

Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-38522 gsd-2023-38522 2026-10-10T21:52:27.992077+00:00 gsd-2023-38522 https://cve.radiocsirt.org/vuln/oesa-2024-1955 OESA-2024-1955 — trafficserver security update 2026-10-10T21:52:27.992088+00:00

Affected: openEuler:24.03-LTS: trafficserver

Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. Security Fix(es): Apache Traffic Server accepts characters that are not allowed for HTTP field names and forwards malformed requests to origin servers. This can be utilized for request smuggling and may also lead cache poisoning if the origin servers are vulnerable. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4. Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue.(CVE-2023-38522) Apache Traffic Server forwards malformed HTTP chunked trailer section to origin servers. This can be utilized for request smuggling and may also lead cache poisoning if the origin servers are vulnerable. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4. Users can set a new setting (proxy.config.http.drop_chunked_trailers) not to forward chunked trailer section. Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue.(CVE-2024-35161)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-38522 UBUNTU-CVE-2023-38522 2026-10-10T21:52:27.992115+00:00

Affected: Ubuntu:16.04:LTS: trafficserver, Ubuntu:18.04:LTS: trafficserver, Ubuntu:Pro:20.04:LTS: trafficserver, Ubuntu:Pro:22.04:LTS: trafficserver, Ubuntu:24.04:LTS: trafficserver

Apache Traffic Server accepts characters that are not allowed for HTTP field names and forwards malformed requests to origin servers. This can be utilized for request smuggling and may also lead cache poisoning if the origin servers are vulnerable. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4. Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1713 WID-SEC-W-2024-1713 — Apache Traffic Server: Mehrere Schwachstellen 2026-10-10T21:52:27.992141+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Traffic Server ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.