Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-31924 EUVD-2026-22227GHSA-ww73-h4g4-66vr

Apache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTP

Published Apr 14, 2026 · Updated Apr 14, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache APISIX

Description

Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.

tencent-cloud-cls log export uses plaintext HTTP
This issue affects Apache APISIX: from 2.99.0 through 3.15.0.

Users are recommended to upgrade to version 3.16.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache APISIX 2.99.0 – ≤ 3.15.0 —

References