今日共收录 1598 条安全情报，包含 743 个 CVE，444 篇安全通告，以及 115 篇研究论文。
← 返回归档列表CVE-2026-58189
Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. T
CVE-2026-58188
Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apach
CVE-2026-58187
The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of serv
CVE-2026-58186
The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This iss
CVE-2026-58185
The Apache Traffic Server intercept plugin has a use-after-free. This issue affects Apache Traffic Server: from 8.0.0 t
CVE-2026-58184
The Apache Traffic Server header_rewrite plugin can crash or corrupt memory during cookie operations and CIDR condition
CVE-2026-58183
The Apache Traffic Server prefetch plugin can crash when processing attacker-influenced input. This issue affects Apach
CVE-2026-58182
The Apache Traffic Server ts_lua plugin mishandles initialization, transform context, and per-instance state. This issu
CVE-2026-58181
The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack or crash on attacker input. This issue
CVE-2026-58180
The Apache Traffic Server txn_box plugin overflows the stack from attacker-controlled input. This issue affects Apache
CVE-2026-58179
The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input. This issue affec
CVE-2026-58178
The Apache Traffic Server ESI plugin can recurse without bound and fetch attacker-controlled URLs. This issue affects A
CVE-2026-58177
The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This is
CVE-2026-58175
Apache Traffic Server leaks memory when handling HostDB SRV records. This issue affects Apache Traffic Server: from 8.0
CVE-2026-58164
Apache Traffic Server has use-after-free and time-of-check/time-of-use errors in remap configuration handling. This iss
CVE-2026-58163
Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing. This issue af
CVE-2026-58161
Apache Traffic Server can crash from null dereferences and dangling references in TLS and SNI handling. This issue affe
CVE-2026-58160
Apache Traffic Server reads out of bounds while parsing DNS answers. This issue affects Apache Traffic Server: from 8.0
CVE-2026-58159
Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affect
CVE-2026-58158
Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects A