traffic_server vulnerabilities

CVEs whose affected-version data names the traffic_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

31 CVEsRSS

CVE-2026-33930Medium· 5.9

3mo ago

Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long Host header overflows the stack when redirect following is enabled. This issue affects Apache…

Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long Host header overflows the stack when redirect following is enabled. This issue affects Apache…

▾ Sunlitapache · traffic_serverEPSS 0.58%via NVD