Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache APISIX

34 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-49230 Public exploit

    Apache APISIX: Authentication bypass in jwe-decrypt

    Improper Validation of Integrity Check Value vulnerability in Apache APISIX. The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache APISIX: from 3.8.0 through 3.16.0. Users are recommended to upgr…

    Apache Software Foundation Apache APISIX