# Apache Software Foundation Apache Traffic Server.

Every CVE that names Apache Software Foundation Apache Traffic Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Apache Traffic Server: Nullptr dereference in net_write_io on a POST half-close with chunked response](https://agentprime.io/advisories/CVE-2026-112381.md)
  `CVE-2026-112381` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [Apache Traffic Server: Dropping chunked trailers stalls a passthrough transfer until timeout](https://agentprime.io/advisories/CVE-2026-111817.md)
  `CVE-2026-111817` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials](https://agentprime.io/advisories/CVE-2026-111812.md)
  `CVE-2026-111812` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.0 High · Not analysed yet · Published 21 Oct 2026 · Tags: Broken access control
- [Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication](https://agentprime.io/advisories/CVE-2026-111811.md)
  `CVE-2026-111811` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Authentication bypass
- [Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling](https://agentprime.io/advisories/CVE-2026-111809.md)
  `CVE-2026-111809` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: HTTP request smuggling
- [Apache Traffic Server: Unthrottled per-header diagnostic logging enables a log-flood denial of service](https://agentprime.io/advisories/CVE-2026-111810.md)
  `CVE-2026-111810` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_client STRICT enforcement](https://agentprime.io/advisories/CVE-2026-111815.md)
  `CVE-2026-111815` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Weak cryptography or TLS
- [Apache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the origin](https://agentprime.io/advisories/CVE-2026-111814.md)
  `CVE-2026-111814` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Weak cryptography or TLS
- [Apache Traffic Server: HTTP/2 DATA frame padding underflow lets a client trigger backend worker-pool exhaustion](https://agentprime.io/advisories/CVE-2026-111808.md)
  `CVE-2026-111808` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [Apache Traffic Server: HTTP/2 Content-Length truncation lets a client trigger backend worker-pool exhaustion](https://agentprime.io/advisories/CVE-2026-111805.md)
  `CVE-2026-111805` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out](https://agentprime.io/advisories/CVE-2026-111816.md)
  `CVE-2026-111816` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: HTTP request smuggling
- [Apache Traffic Server: An unread Expect: 100-continue request body is framed as a new request](https://agentprime.io/advisories/CVE-2025-55702.md)
  `CVE-2025-55702` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.0 High · Not analysed yet · Published 21 Oct 2026 · Tags: HTTP request smuggling
- [Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling](https://agentprime.io/advisories/CVE-2025-31699.md)
  `CVE-2025-31699` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: HTTP request smuggling
- [Apache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDs](https://agentprime.io/advisories/CVE-2026-111804.md)
  `CVE-2026-111804` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration](https://agentprime.io/advisories/CVE-2026-111813.md)
  `CVE-2026-111813` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection
- [Apache Traffic Server: SNI to Host header matching policy is not properly enforced](https://agentprime.io/advisories/CVE-2026-102795.md)
  `CVE-2026-102795` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.0 High · Not analysed yet · Published 2 Oct 2026 · Tags: Broken access control
- [Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode](https://agentprime.io/advisories/CVE-2026-65100.md)
  `CVE-2026-65100` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.3 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-696
- [Apache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification](https://agentprime.io/advisories/CVE-2026-58189.md)
  `CVE-2026-58189` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins](https://agentprime.io/advisories/CVE-2026-58188.md)
  `CVE-2026-58188` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.4 High · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service](https://agentprime.io/advisories/CVE-2026-58187.md)
  `CVE-2026-58187` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.3 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses](https://agentprime.io/advisories/CVE-2026-58186.md)
  `CVE-2026-58186` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-20
- [Apache Traffic Server: Use-after-free in the intercept plugin](https://agentprime.io/advisories/CVE-2026-58185.md)
  `CVE-2026-58185` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: header_rewrite plugin cookie handling can corrupt memory](https://agentprime.io/advisories/CVE-2026-58184.md)
  `CVE-2026-58184` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: prefetch plugin can crash on attacker-influenced input](https://agentprime.io/advisories/CVE-2026-58183.md)
  `CVE-2026-58183` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-20
- [Apache Traffic Server: ts_lua plugin has initialization and resource-handling errors](https://agentprime.io/advisories/CVE-2026-58182.md)
  `CVE-2026-58182` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Denial of service
- [Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash](https://agentprime.io/advisories/CVE-2026-58181.md)
  `CVE-2026-58181` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: txn_box plugin overflows the stack from attacker input](https://agentprime.io/advisories/CVE-2026-58180.md)
  `CVE-2026-58180` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: regex_remap plugin overflows the stack from attacker input](https://agentprime.io/advisories/CVE-2026-58179.md)
  `CVE-2026-58179` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery](https://agentprime.io/advisories/CVE-2026-58178.md)
  `CVE-2026-58178` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Denial of service
- [Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework](https://agentprime.io/advisories/CVE-2026-58177.md)
  `CVE-2026-58177` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: HostDB SRV handling leaks memory](https://agentprime.io/advisories/CVE-2026-58175.md)
  `CVE-2026-58175` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Denial of service
- [Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free](https://agentprime.io/advisories/CVE-2026-58164.md)
  `CVE-2026-58164` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server](https://agentprime.io/advisories/CVE-2026-58163.md)
  `CVE-2026-58163` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Insecure deserialization
- [Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates](https://agentprime.io/advisories/CVE-2026-58162.md)
  `CVE-2026-58162` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.4 High · Not analysed yet · Published 29 Jul 2026 · Tags: Weak cryptography or TLS
- [Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server](https://agentprime.io/advisories/CVE-2026-58161.md)
  `CVE-2026-58161` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: Out-of-bounds reads while parsing DNS responses](https://agentprime.io/advisories/CVE-2026-58160.md)
  `CVE-2026-58160` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.3 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: Listener and ACL handling allow access-control bypass](https://agentprime.io/advisories/CVE-2026-58159.md)
  `CVE-2026-58159` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.0 High · Not analysed yet · Published 29 Jul 2026 · Tags: Broken access control
- [Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow](https://agentprime.io/advisories/CVE-2026-58158.md)
  `CVE-2026-58158` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: Improper server-session reuse can expose data across client connections](https://agentprime.io/advisories/CVE-2026-58157.md)
  `CVE-2026-58157` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.9 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Information disclosure
- [Apache Traffic Server: URL and port parsing errors allow access-control bypass](https://agentprime.io/advisories/CVE-2026-58156.md)
  `CVE-2026-58156` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.3 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Broken access control
- [Apache Traffic Server: Header-name length truncation enables header aliasing and request smuggling](https://agentprime.io/advisories/CVE-2026-58155.md)
  `CVE-2026-58155` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: HTTP request smuggling
- [Apache Traffic Server: Memory-safety errors in MIME and header parsing](https://agentprime.io/advisories/CVE-2026-58154.md)
  `CVE-2026-58154` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification](https://agentprime.io/advisories/CVE-2026-65325.md)
  `CVE-2026-65325` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.3 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Weak cryptography or TLS
- [Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion](https://agentprime.io/advisories/CVE-2026-65324.md)
  `CVE-2026-65324` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Denial of service
- [Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely](https://agentprime.io/advisories/CVE-2026-58153.md)
  `CVE-2026-58153` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.3 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: HTTP request smuggling
- [Apache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memory](https://agentprime.io/advisories/CVE-2026-58152.md)
  `CVE-2026-58152` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.9 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the server](https://agentprime.io/advisories/CVE-2026-58151.md)
  `CVE-2026-58151` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.7 High · Not analysed yet · Published 29 Jul 2026 · Tags: Denial of service
- [Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smuggling](https://agentprime.io/advisories/CVE-2026-58150.md)
  `CVE-2026-58150` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.8 High · Not analysed yet · Published 29 Jul 2026 · Tags: HTTP request smuggling
- [Apache Traffic Server: Malformed chunked message body allows request smuggling](https://agentprime.io/advisories/CVE-2026-57834.md)
  `CVE-2026-57834` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.0 High · Not analysed yet · Published 29 Jul 2026 · Tags: HTTP request smuggling
- [Apache Traffic Server: Buffer overflow via Host field that has a long string value](https://agentprime.io/advisories/CVE-2026-33930.md)
  `CVE-2026-33930` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [Apache Traffic Server: Request smuggling via chunked extension quoted-string parsing](https://agentprime.io/advisories/CVE-2026-24033.md)
  `CVE-2026-24033` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.9 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: HTTP request smuggling
- [Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata](https://agentprime.io/advisories/CVE-2026-33267.md)
  `CVE-2026-33267` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.7 High · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-20
- [Apache Traffic Server: Regex mappings match with malicious domain names](https://agentprime.io/advisories/CVE-2026-22068.md)
  `CVE-2026-22068` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.9 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-777
- [Apache Traffic Server: SNI to Host header matching policy is not properly enforced](https://agentprime.io/advisories/CVE-2026-41920.md)
  `CVE-2026-41920` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.0 High · Not analysed yet · Published 29 Jul 2026 · Tags: Broken access control
- [Apache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions](https://agentprime.io/advisories/CVE-2026-59173.md)
  `CVE-2026-59173` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.5 High · Not analysed yet · Published 18 Jul 2026 · Tags: Denial of service
- [Apache Traffic Server: Malformed chunked message body allows request smuggling](https://agentprime.io/advisories/CVE-2025-65114.md)
  `CVE-2025-65114` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: HTTP request smuggling
- [Apache Traffic Server: A simple legitimate POST request causes a crash](https://agentprime.io/advisories/CVE-2025-58136.md)
  `CVE-2025-58136` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-670
- [Apache Traffic Server: Client IP address from PROXY protocol is not used for ACL](https://agentprime.io/advisories/CVE-2025-31698.md)
  `CVE-2025-31698` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2025 · Tags: Broken access control
- [Apache Traffic Server: Remote DoS via memory exhaustion in ESI Plugin](https://agentprime.io/advisories/CVE-2025-49763.md)
  `CVE-2025-49763` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2025 · Tags: Denial of service
- [Apache Traffic Server: Malformed chunked message body allows request smuggling](https://agentprime.io/advisories/CVE-2024-53868.md)
  `CVE-2024-53868` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.5 High · Not analysed yet · Published 3 Apr 2025 · Tags: HTTP request smuggling

Older: <https://agentprime.io/advisories/technology/apache-software-foundation-apache-traffic-server.md?cursor=WyIyMDI1LTA0LTAzVDA4OjU5OjAyLjU1NzAwMFoiLCJDVkUtMjAyNC01Mzg2OCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=apache-software-foundation-apache-traffic-server>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/apache-software-foundation-apache-traffic-server/>. Everything for agents: <https://agentprime.io/llms.txt>.