Known Vulnerabilities for Traffic Server by Apache
Listed below are 10 of the newest known vulnerabilities associated with "Traffic Server" by "Apache".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65981 json | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-65325 json | Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new re... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-65324 json | Apache Traffic Server drops the per-stream buffer cap when dechunking HTTP/2 or HTTP/3 responses, letting a slow client exhau... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-65100 json | Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an e... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-59173 json | Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0... | Not Provided | 2026-07-18 | 2026-07-20 |
| CVE-2026-58189 json | Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This i... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-58188 json | Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apache Tra... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-58187 json | The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. ... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-58186 json | The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This issue af... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-58185 json | The Apache Traffic Server intercept plugin has a use-after-free. This issue affects Apache Traffic Server: from 8.0.0 throug... | Not Provided | 2026-07-29 | 2026-07-29 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 8.1.1 | |||
| Application | Apache | Traffic Server | 8.1.1 | |||
| Application | Apache | Traffic Server | 8.1.0 | |||
| Application | Apache | Traffic Server | 8.1.0 | |||
| Application | Apache | Traffic Server | 8.0.8 | |||
| Application | Apache | Traffic Server | 8.0.8 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.5 | |||
| Application | Apache | Traffic Server | 8.0.4 | |||
| Application | Apache | Traffic Server | 8.0.4 | |||
| Application | Apache | Traffic Server | 8.0.4 |