https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T23:04:46.253222+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08919 bdu:2026-08919 2026-10-09T23:04:46.256531+00:00 bdu:2026-08919 https://cve.radiocsirt.org/vuln/bit-apisix-2026-39998 BIT-apisix-2026-39998 — Apache APISIX: Identity Injection via forward-auth Plugin Missing Header Cleanup 2026-10-09T23:04:46.256562+00:00

Affected: Bitnami: apisix

Improper Input Validation vulnerability in Apache APISIX.

The attacker can take advantage of certain configuration in forward-auth plugin to spoof identity headers. This issue affects Apache APISIX: from 2.12.0 through 3.16.0.

Users are recommended to upgrade to version 3.17.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-328970 EUVD-2026-328970 2026-10-09T23:04:46.256597+00:00 EUVD-2026-328970 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39998 fkie_cve-2026-39998 2026-10-09T23:04:46.256611+00:00

Improper Input Validation vulnerability in Apache APISIX.

The attacker can take advantage of certain configuration in forward-auth plugin to spoof identity headers. This issue affects Apache APISIX: from 2.12.0 through 3.16.0.

Users are recommended to upgrade to version 3.17.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-86hq-f9pp-3cr9 GHSA-86hq-f9pp-3cr9 2026-10-09T23:04:46.256634+00:00

Improper Input Validation vulnerability in Apache APISIX.

The attacker can take advantage of certain configuration in forward-auth plugin to spoof identity headers. This issue affects Apache APISIX: from 2.12.0 through 3.16.0.

Users are recommended to upgrade to version 3.17.0, which fixes the issue.