https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:35:42 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:1142 <p><strong>Affected:</strong> AlmaLinux:9: haproxy</p> <p>The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.</p> <p>Security Fix(es):</p> <p>* haproxy: Proxy forwards malformed empty Content-Length headers (CVE-2023-40225) * haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers (CVE-2023-45539)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: haproxy</p> <p>The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.</p> <p>Security Fix(es):</p> <p>* haproxy: Proxy forwards malformed empty Content-Length headers (CVE-2023-40225) * haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers (CVE-2023-45539)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:1142 https://cve.radiocsirt.org/vuln/bdu:2024-02429 bdu:2024-02429 https://cve.radiocsirt.org/vuln/bdu:2024-02429 https://cve.radiocsirt.org/vuln/bit-haproxy-2023-40225 <p><strong>Affected:</strong> Bitnami: haproxy</p> <p>HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.</p> <p><strong>Affected:</strong> Bitnami: haproxy</p> <p>HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.</p> https://cve.radiocsirt.org/vuln/bit-haproxy-2023-40225 https://cve.radiocsirt.org/vuln/euvd-2026-194542 EUVD-2026-194542 https://cve.radiocsirt.org/vuln/euvd-2026-194542 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40225 <p>HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.</p> <p>HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-40225 https://cve.radiocsirt.org/vuln/ghsa-xgq7-jp95-v2qv <p>HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.</p> <p>HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.</p> https://cve.radiocsirt.org/vuln/ghsa-xgq7-jp95-v2qv https://cve.radiocsirt.org/vuln/gsd-2023-40225 gsd-2023-40225 https://cve.radiocsirt.org/vuln/gsd-2023-40225 https://cve.radiocsirt.org/vuln/msrc_cve-2023-40225 msrc_CVE-2023-40225 https://cve.radiocsirt.org/vuln/msrc_cve-2023-40225 https://cve.radiocsirt.org/vuln/oesa-2023-1541 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: haproxy, openEuler:20.03-LTS-SP3: haproxy, openEuler:22.03-LTS: haproxy, openEuler:22.03-LTS-SP1: haproxy, openEuler:22.03-LTS-SP2: haproxy</p> <p>HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world&#39;s most visited ones.</p> <p>Security Fix(es):</p> <p>HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.(CVE-2023-40225)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: haproxy, openEuler:20.03-LTS-SP3: haproxy, openEuler:22.03-LTS: haproxy, openEuler:22.03-LTS-SP1: haproxy, openEuler:22.03-LTS-SP2: haproxy</p> <p>HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world&#39;s most visited ones.</p> <p>Security Fix(es):</p> <p>HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.(CVE-2023-40225)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1541 https://cve.radiocsirt.org/vuln/rhsa-2023:7473 <p>python-werkzeug: high resource usage when parsing multipart form data with many fields haproxy: Proxy forwards malformed empty Content-Length headers python-werkzeug: high resource consumption leading to denial of service</p> <p>python-werkzeug: high resource usage when parsing multipart form data with many fields haproxy: Proxy forwards malformed empty Content-Length headers python-werkzeug: high resource consumption leading to denial of service</p> https://cve.radiocsirt.org/vuln/rhsa-2023:7473 https://cve.radiocsirt.org/vuln/rhsa-2024:1142 <p>haproxy: Proxy forwards malformed empty Content-Length headers haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers</p> <p>haproxy: Proxy forwards malformed empty Content-Length headers haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers</p> https://cve.radiocsirt.org/vuln/rhsa-2024:1142 https://cve.radiocsirt.org/vuln/suse-su-2023:3490-1 <p>Security update for haproxy</p> <p>Security update for haproxy</p> https://cve.radiocsirt.org/vuln/suse-su-2023:3490-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-40225 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: haproxy, Ubuntu:22.04:LTS: haproxy</p> <p>HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: haproxy, Ubuntu:22.04:LTS: haproxy</p> <p>HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-40225 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2041 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in HAProxy Enterprise ausnutzen, um falsche Informationen darzustellen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in HAProxy Enterprise ausnutzen, um falsche Informationen darzustellen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2041