Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:44:03 +0000 bdu:2026-05625 https://cve.radiocsirt.org/vuln/bdu:2026-05625 bdu:2026-05625 https://cve.radiocsirt.org/vuln/bdu:2026-05625 BIT-apisix-2026-31908 — Apache APISIX: forward auth plugin allows header injection https://cve.radiocsirt.org/vuln/bit-apisix-2026-31908 <p><strong>Affected:</strong> Bitnami: apisix</p> <p>Header injection vulnerability in Apache APISIX.</p> <p>The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0.</p> <p>Users are recommended to upgrade to version 3.16.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: apisix</p> <p>Header injection vulnerability in Apache APISIX.</p> <p>The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0.</p> <p>Users are recommended to upgrade to version 3.16.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-apisix-2026-31908 EUVD-2026-291567 https://cve.radiocsirt.org/vuln/euvd-2026-291567 EUVD-2026-291567 https://cve.radiocsirt.org/vuln/euvd-2026-291567 fkie_cve-2026-31908 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31908 <p>Header injection vulnerability in Apache APISIX.</p> <p>The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0.</p> <p>Users are recommended to upgrade to version 3.16.0, which fixes the issue.</p> <p>Header injection vulnerability in Apache APISIX.</p> <p>The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0.</p> <p>Users are recommended to upgrade to version 3.16.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-31908 GHSA-jv22-34xc-w9x6 https://cve.radiocsirt.org/vuln/ghsa-jv22-34xc-w9x6 <p>Header injection vulnerability in Apache APISIX.</p> <p>The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0.</p> <p>Users are recommended to upgrade to version 3.16.0, which fixes the issue.</p> <p>Header injection vulnerability in Apache APISIX.</p> <p>The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0.</p> <p>Users are recommended to upgrade to version 3.16.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-jv22-34xc-w9x6