agentprime: apache-software-foundation-apache-traffic-serverEvery new CVE for apache-software-foundation-apache-traffic-server.https://agentprime.io/CVE-2026-112381: Apache Traffic Server: Nullptr dereference in net_write_io on a POST half-close with chunked responsehttps://agentprime.io/advisories/CVE-2026-112381/https://agentprime.io/advisories/CVE-2026-112381/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 19:20:38 GMTCVECVE-2026-111817: Apache Traffic Server: Dropping chunked trailers stalls a passthrough transfer until timeouthttps://agentprime.io/advisories/CVE-2026-111817/https://agentprime.io/advisories/CVE-2026-111817/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 19:20:00 GMTCVECVE-2026-111812: Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentialshttps://agentprime.io/advisories/CVE-2026-111812/https://agentprime.io/advisories/CVE-2026-111812/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 19:18:19 GMTCVECVE-2026-111811: Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authenticationhttps://agentprime.io/advisories/CVE-2026-111811/https://agentprime.io/advisories/CVE-2026-111811/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 19:17:32 GMTCVEcriticalCVE-2026-111809: Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smugglinghttps://agentprime.io/advisories/CVE-2026-111809/https://agentprime.io/advisories/CVE-2026-111809/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 19:16:16 GMTCVECVE-2026-111810: Apache Traffic Server: Unthrottled per-header diagnostic logging enables a log-flood denial of servicehttps://agentprime.io/advisories/CVE-2026-111810/https://agentprime.io/advisories/CVE-2026-111810/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 19:14:50 GMTCVECVE-2026-111815: Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_client STRICT enforcementhttps://agentprime.io/advisories/CVE-2026-111815/https://agentprime.io/advisories/CVE-2026-111815/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 19:13:55 GMTCVECVE-2026-111814: Apache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the originhttps://agentprime.io/advisories/CVE-2026-111814/https://agentprime.io/advisories/CVE-2026-111814/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 19:13:06 GMTCVECVE-2026-111808: Apache Traffic Server: HTTP/2 DATA frame padding underflow lets a client trigger backend worker-pool exhaustionhttps://agentprime.io/advisories/CVE-2026-111808/https://agentprime.io/advisories/CVE-2026-111808/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 19:11:59 GMTCVECVE-2026-111805: Apache Traffic Server: HTTP/2 Content-Length truncation lets a client trigger backend worker-pool exhaustionhttps://agentprime.io/advisories/CVE-2026-111805/https://agentprime.io/advisories/CVE-2026-111805/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 19:10:46 GMTCVECVE-2026-111816: Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-outhttps://agentprime.io/advisories/CVE-2026-111816/https://agentprime.io/advisories/CVE-2026-111816/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:26:32 GMTCVEcriticalCVE-2025-55702: Apache Traffic Server: An unread Expect: 100-continue request body is framed as a new requesthttps://agentprime.io/advisories/CVE-2025-55702/https://agentprime.io/advisories/CVE-2025-55702/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:24:21 GMTCVECVE-2025-31699: Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smugglinghttps://agentprime.io/advisories/CVE-2025-31699/https://agentprime.io/advisories/CVE-2025-31699/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:22:28 GMTCVEcriticalCVE-2026-111804: Apache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDshttps://agentprime.io/advisories/CVE-2026-111804/https://agentprime.io/advisories/CVE-2026-111804/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:21:32 GMTCVECVE-2026-111813: Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configurationhttps://agentprime.io/advisories/CVE-2026-111813/https://agentprime.io/advisories/CVE-2026-111813/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:20:22 GMTCVEcriticalCVE-2026-102795: Apache Traffic Server: SNI to Host header matching policy is not properly enforcedhttps://agentprime.io/advisories/CVE-2026-102795/https://agentprime.io/advisories/CVE-2026-102795/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 17:40:50 GMTCVECVE-2026-65100: Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encodehttps://agentprime.io/advisories/CVE-2026-65100/https://agentprime.io/advisories/CVE-2026-65100/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 09:06:17 GMTCVECVE-2026-58189: Apache Traffic Server: Plugins resetting the redirect counter enable SSRF amplificationhttps://agentprime.io/advisories/CVE-2026-58189/https://agentprime.io/advisories/CVE-2026-58189/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 09:05:19 GMTCVECVE-2026-58188: Apache Traffic Server: Memory-safety and limit-bypass errors across experimental pluginshttps://agentprime.io/advisories/CVE-2026-58188/https://agentprime.io/advisories/CVE-2026-58188/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 09:04:24 GMTCVECVE-2026-58187: Apache Traffic Server: Multiplexer plugin chunk decoder enables a denial of servicehttps://agentprime.io/advisories/CVE-2026-58187/https://agentprime.io/advisories/CVE-2026-58187/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 09:03:22 GMTCVECVE-2026-58186: Apache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responseshttps://agentprime.io/advisories/CVE-2026-58186/https://agentprime.io/advisories/CVE-2026-58186/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 09:01:39 GMTCVECVE-2026-58185: Apache Traffic Server: Use-after-free in the intercept pluginhttps://agentprime.io/advisories/CVE-2026-58185/https://agentprime.io/advisories/CVE-2026-58185/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:57:48 GMTCVECVE-2026-58184: Apache Traffic Server: header_rewrite plugin cookie handling can corrupt memoryhttps://agentprime.io/advisories/CVE-2026-58184/https://agentprime.io/advisories/CVE-2026-58184/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:56:51 GMTCVECVE-2026-58183: Apache Traffic Server: prefetch plugin can crash on attacker-influenced inputhttps://agentprime.io/advisories/CVE-2026-58183/https://agentprime.io/advisories/CVE-2026-58183/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:55:52 GMTCVECVE-2026-58182: Apache Traffic Server: ts_lua plugin has initialization and resource-handling errorshttps://agentprime.io/advisories/CVE-2026-58182/https://agentprime.io/advisories/CVE-2026-58182/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:54:49 GMTCVECVE-2026-58181: Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crashhttps://agentprime.io/advisories/CVE-2026-58181/https://agentprime.io/advisories/CVE-2026-58181/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:46:04 GMTCVECVE-2026-58180: Apache Traffic Server: txn_box plugin overflows the stack from attacker inputhttps://agentprime.io/advisories/CVE-2026-58180/https://agentprime.io/advisories/CVE-2026-58180/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:45:15 GMTCVECVE-2026-58179: Apache Traffic Server: regex_remap plugin overflows the stack from attacker inputhttps://agentprime.io/advisories/CVE-2026-58179/https://agentprime.io/advisories/CVE-2026-58179/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:44:33 GMTCVEcriticalCVE-2026-58178: Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-58178/https://agentprime.io/advisories/CVE-2026-58178/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:43:25 GMTCVECVE-2026-58177: Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts frameworkhttps://agentprime.io/advisories/CVE-2026-58177/https://agentprime.io/advisories/CVE-2026-58177/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:42:41 GMTCVECVE-2026-58175: Apache Traffic Server: HostDB SRV handling leaks memoryhttps://agentprime.io/advisories/CVE-2026-58175/https://agentprime.io/advisories/CVE-2026-58175/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:41:50 GMTCVECVE-2026-58164: Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-freehttps://agentprime.io/advisories/CVE-2026-58164/https://agentprime.io/advisories/CVE-2026-58164/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:37:42 GMTCVECVE-2026-58163: Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the serverhttps://agentprime.io/advisories/CVE-2026-58163/https://agentprime.io/advisories/CVE-2026-58163/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:36:57 GMTCVECVE-2026-58162: Apache Traffic Server: Certifier plugin trusts client SNI when generating certificateshttps://agentprime.io/advisories/CVE-2026-58162/https://agentprime.io/advisories/CVE-2026-58162/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:36:17 GMTCVECVE-2026-58161: Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the serverhttps://agentprime.io/advisories/CVE-2026-58161/https://agentprime.io/advisories/CVE-2026-58161/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:35:39 GMTCVEcriticalCVE-2026-58160: Apache Traffic Server: Out-of-bounds reads while parsing DNS responseshttps://agentprime.io/advisories/CVE-2026-58160/https://agentprime.io/advisories/CVE-2026-58160/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:34:34 GMTCVECVE-2026-58159: Apache Traffic Server: Listener and ACL handling allow access-control bypasshttps://agentprime.io/advisories/CVE-2026-58159/https://agentprime.io/advisories/CVE-2026-58159/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:32:04 GMTCVECVE-2026-58158: Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflowhttps://agentprime.io/advisories/CVE-2026-58158/https://agentprime.io/advisories/CVE-2026-58158/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:26:32 GMTCVECVE-2026-58157: Apache Traffic Server: Improper server-session reuse can expose data across client connectionshttps://agentprime.io/advisories/CVE-2026-58157/https://agentprime.io/advisories/CVE-2026-58157/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:25:52 GMTCVECVE-2026-58156: Apache Traffic Server: URL and port parsing errors allow access-control bypasshttps://agentprime.io/advisories/CVE-2026-58156/https://agentprime.io/advisories/CVE-2026-58156/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:25:12 GMTCVECVE-2026-58155: Apache Traffic Server: Header-name length truncation enables header aliasing and request smugglinghttps://agentprime.io/advisories/CVE-2026-58155/https://agentprime.io/advisories/CVE-2026-58155/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:24:37 GMTCVEcriticalCVE-2026-58154: Apache Traffic Server: Memory-safety errors in MIME and header parsinghttps://agentprime.io/advisories/CVE-2026-58154/https://agentprime.io/advisories/CVE-2026-58154/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:24:02 GMTCVEcriticalCVE-2026-65325: Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verificationhttps://agentprime.io/advisories/CVE-2026-65325/https://agentprime.io/advisories/CVE-2026-65325/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:23:28 GMTCVECVE-2026-65324: Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustionhttps://agentprime.io/advisories/CVE-2026-65324/https://agentprime.io/advisories/CVE-2026-65324/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:17:46 GMTCVECVE-2026-58153: Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafelyhttps://agentprime.io/advisories/CVE-2026-58153/https://agentprime.io/advisories/CVE-2026-58153/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:17:11 GMTCVECVE-2026-58152: Apache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memoryhttps://agentprime.io/advisories/CVE-2026-58152/https://agentprime.io/advisories/CVE-2026-58152/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:16:21 GMTCVECVE-2026-58151: Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the serverhttps://agentprime.io/advisories/CVE-2026-58151/https://agentprime.io/advisories/CVE-2026-58151/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 08:15:45 GMTCVECVE-2026-58150: Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smugglinghttps://agentprime.io/advisories/CVE-2026-58150/https://agentprime.io/advisories/CVE-2026-58150/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 07:30:25 GMTCVECVE-2026-57834: Apache Traffic Server: Malformed chunked message body allows request smugglinghttps://agentprime.io/advisories/CVE-2026-57834/https://agentprime.io/advisories/CVE-2026-57834/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 07:25:49 GMTCVECVE-2026-33930: Apache Traffic Server: Buffer overflow via Host field that has a long string valuehttps://agentprime.io/advisories/CVE-2026-33930/https://agentprime.io/advisories/CVE-2026-33930/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 07:23:54 GMTCVE