Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:06:01 +0000 BIT-apisix-2026-49230 — Apache APISIX: Authentication bypass in jwe-decrypt https://cve.radiocsirt.org/vuln/bit-apisix-2026-49230 <p><strong>Affected:</strong> Bitnami: apisix</p> <p>Improper Validation of Integrity Check Value vulnerability in Apache APISIX.</p> <p>The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache APISIX: from 3.8.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: apisix</p> <p>Improper Validation of Integrity Check Value vulnerability in Apache APISIX.</p> <p>The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache APISIX: from 3.8.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-apisix-2026-49230 EUVD-2026-328978 https://cve.radiocsirt.org/vuln/euvd-2026-328978 EUVD-2026-328978 https://cve.radiocsirt.org/vuln/euvd-2026-328978 fkie_cve-2026-49230 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49230 <p>Improper Validation of Integrity Check Value vulnerability in Apache APISIX.</p> <p>The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache APISIX: from 3.8.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> <p>Improper Validation of Integrity Check Value vulnerability in Apache APISIX.</p> <p>The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache APISIX: from 3.8.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49230 GHSA-3mg6-56vq-7899 https://cve.radiocsirt.org/vuln/ghsa-3mg6-56vq-7899 <p>Improper Validation of Integrity Check Value vulnerability in Apache APISIX.</p> <p>The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache APISIX: from 3.8.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> <p>Improper Validation of Integrity Check Value vulnerability in Apache APISIX.</p> <p>The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache APISIX: from 3.8.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-3mg6-56vq-7899