https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T16:46:53.663759+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-apisix-2024-32638 BIT-apisix-2024-32638 — Apache APISIX: Forward-Auth Request Smuggling 2026-10-12T16:46:53.666532+00:00

Affected: Bitnami: apisix

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Apache APISIX when using `forward-auth` plugin.This issue affects Apache APISIX: from 3.8.0, 3.9.0.

Users are recommended to upgrade to version 3.8.1, 3.9.1 or higher, which fixes the issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-217404 EUVD-2026-217404 2026-10-12T16:46:53.666577+00:00 EUVD-2026-217404 https://cve.radiocsirt.org/vuln/fkie_cve-2024-32638 fkie_cve-2024-32638 2026-10-12T16:46:53.666593+00:00

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Apache APISIX when using `forward-auth` plugin.This issue affects Apache APISIX: from 3.8.0, 3.9.0.

Users are recommended to upgrade to version 3.8.1, 3.9.1 or higher, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-8g74-32fg-5ghc GHSA-8g74-32fg-5ghc 2026-10-12T16:46:53.666616+00:00

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Apache APISIX when using `forward-auth` plugin.This issue affects Apache APISIX: from 3.8.0, 3.9.0.

Users are recommended to upgrade to version 3.8.1, 3.9.1 or higher, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-32638 gsd-2024-32638 2026-10-12T16:46:53.666633+00:00 gsd-2024-32638