Known Vulnerabilities for Transport-http by Wso2
Listed below are 1 of the newest known vulnerabilities associated with "Transport-http" by "Wso2".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109575 json | In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has proc... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-108395 json | The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-107938 json | In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname i... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-107318 json | @fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7... | Not Provided | 2026-10-08 | 2026-10-09 |
| CVE-2026-107226 json | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP re... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-105790 json | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authentica... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-105216 json | go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate ... | Not Provided | 2026-10-04 | 2026-10-05 |
| CVE-2026-104380 json | Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_s... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-101905 json | Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adap... | Not Provided | 2026-09-28 | 2026-10-01 |
| CVE-2026-92543 json | Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0... | Not Provided | 2026-10-07 | 2026-10-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Wso2 | Transport-http | 6.3.8 | |||
| Application | Wso2 | Transport-http | 6.3.7 | |||
| Application | Wso2 | Transport-http | 6.3.6 | |||
| Application | Wso2 | Transport-http | 6.3.5 | |||
| Application | Wso2 | Transport-http | 6.3.4 | |||
| Application | Wso2 | Transport-http | 6.3.3 | |||
| Application | Wso2 | Transport-http | 6.3.2 | |||
| Application | Wso2 | Transport-http | 6.3.1 | |||
| Application | Wso2 | Transport-http | 6.3.0 | |||
| Application | Wso2 | Transport-http | 6.2.9 | |||
| Application | Wso2 | Transport-http | 6.2.8 | |||
| Application | Wso2 | Transport-http | 6.2.7 | |||
| Application | Wso2 | Transport-http | 6.2.6 | |||
| Application | Wso2 | Transport-http | 6.2.5 | |||
| Application | Wso2 | Transport-http | 6.2.4 | |||
| Application | Wso2 | Transport-http | 6.2.34 | |||
| Application | Wso2 | Transport-http | 6.2.33 | |||
| Application | Wso2 | Transport-http | 6.2.32 | |||
| Application | Wso2 | Transport-http | 6.2.31 | |||
| Application | Wso2 | Transport-http | 6.2.30 |