Haproxy Technologies vulnerabilities
2 vulnerabilities
Known vulnerabilities in Haproxy Technologies products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Haproxy1 vulnerabilities
- Haproxy Community Edition1 vulnerabilities
- Haproxy Kubernetes Ingress Controller
- Kubernetes Ingress Controller Enterprise
CVE-2026-110354haproxy technologieshaproxy kubernetes ingress controller+3HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without making progress. The affected thread stays busy at 100% CPU after timeouts expire and after the client disconnects, and repeated requests can consume all worker threads until the process is restarted.CVE-2025-11230chainguardhaproxy-2.4+28
EPSS score0.74%
Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.CVE-2023-25950debianhaproxy+2EPSS score2.97%
HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition.