https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:11:50.878638+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-apisix-2026-49230 BIT-apisix-2026-49230 — Apache APISIX: Authentication bypass in jwe-decrypt 2026-10-06T22:11:50.929826+00:00

Affected: Bitnami: apisix

Improper Validation of Integrity Check Value vulnerability in Apache APISIX.

The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache APISIX: from 3.8.0 through 3.16.0.

Users are recommended to upgrade to version 3.17.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-328978 EUVD-2026-328978 2026-10-06T22:11:50.929907+00:00 EUVD-2026-328978 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49230 fkie_cve-2026-49230 2026-10-06T22:11:50.929931+00:00

Improper Validation of Integrity Check Value vulnerability in Apache APISIX.

The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache APISIX: from 3.8.0 through 3.16.0.

Users are recommended to upgrade to version 3.17.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-3mg6-56vq-7899 GHSA-3mg6-56vq-7899 2026-10-06T22:11:50.929973+00:00

Improper Validation of Integrity Check Value vulnerability in Apache APISIX.

The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache APISIX: from 3.8.0 through 3.16.0.

Users are recommended to upgrade to version 3.17.0, which fixes the issue.