trafficserver

3 results · Clear filters · Feed

• Critical 10.0
  CVE-2026-33267 Public exploit

  Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata

  Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.

  Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu
  Jul 29, 2026
• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs go dotnet7 trafficserver Debian Ubuntu Alpine Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023
• Unscored —
  CVE-2018-8004 Public exploit

  There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apach…

  Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu
  Aug 29, 2018