Known vulnerabilities in Apache APISIX - page 2

Software: Apache APISIX
Software CPE: cpe:2.3:a:apache_foundation:apisix:*:*:*:*:*:*:*:*
Total vulnerabilities: 31
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache APISIX Apache APISIX is affected by 31 known vulnerabilities: 7 high, 17 medium, 7 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153092 - Improper Authentication
CVE-2026-94276
CWE-287 Low
No
No
3.19.0 01.10.2026 SB2026100188
#VU153091 - Use of Non-Canonical URL Paths for Authorization Decisions
CVE-2026-94269
CWE-647 Medium
No
No
3.19.0 01.10.2026 SB2026100188
#VU153090 - Allocation of Resources Without Limits or Throttling
CVE-2026-94250
CWE-770 Medium
No
No
3.19.0 01.10.2026 SB2026100188
#VU153089 - Cross-Site Request Forgery (CSRF)
CVE-2026-94220
CWE-352 Low
No
No
3.19.0 01.10.2026 SB2026100188
#VU153088 - Improper Verification of Cryptographic Signature
CVE-2026-94212
CWE-347 Low
No
No
3.19.0 01.10.2026 SB2026100188
#VU153086 - Information Exposure Through Log Files
CVE-2026-78242
CWE-532 Low
No
No
3.18.0 01.10.2026 SB2026082617
#VU62448 - Externally-generated error message containing sensitive information
CVE-2022-29266
CWE-211 High
No
No
2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.13.1 20.04.2022 SB2022042003
#VU61650 - Improper input validation
CVE-2022-25757
CWE-20 Medium
No
No
2.13.0 28.03.2022 SB2022032805
#VU60580 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24112
CWE-94 High
Available
Exploited
2.10.4, 2.12.1 14.02.2022 SB2022021408
#VU59095 - Improper Authentication
CVE-2021-45232
CWE-287 High
Available
No
2.10.1 27.12.2021 SB2021122711
#VU58389 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43557
CWE-22 Medium
Available
No
2.10.2 26.11.2021 SB2021112611


Showing elements 21 - 40 out of 31