Known Vulnerabilities for Transport-http by Wso2
Listed below are 1 of the newest known vulnerabilities associated with "Transport-http" by "Wso2".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-120234 json | A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component HTTP T... | Not Provided | 2026-11-01 | 2026-11-01 |
| CVE-2026-118777 json | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forg... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-118657 json | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forwarded scheme headers from an... | Not Provided | 2026-10-28 | 2026-11-03 |
| CVE-2026-116694 json | OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract() in opente... | Not Provided | 2026-10-27 | 2026-10-28 |
| CVE-2026-114614 json | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.is_... | Not Provided | 2026-10-22 | 2026-10-29 |
| CVE-2026-111763 json | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a malicious or compromised re... | Not Provided | 2026-10-20 | 2026-10-21 |
| CVE-2026-109575 json | In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has proc... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-108395 json | The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-107938 json | In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname i... | Not Provided | 2026-10-09 | 2026-10-15 |
| CVE-2026-107318 json | @fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7... | Not Provided | 2026-10-08 | 2026-10-09 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Wso2 | Transport-http | 6.3.8 | |||
| Application | Wso2 | Transport-http | 6.3.7 | |||
| Application | Wso2 | Transport-http | 6.3.6 | |||
| Application | Wso2 | Transport-http | 6.3.5 | |||
| Application | Wso2 | Transport-http | 6.3.4 | |||
| Application | Wso2 | Transport-http | 6.3.3 | |||
| Application | Wso2 | Transport-http | 6.3.2 | |||
| Application | Wso2 | Transport-http | 6.3.1 | |||
| Application | Wso2 | Transport-http | 6.3.0 | |||
| Application | Wso2 | Transport-http | 6.2.9 | |||
| Application | Wso2 | Transport-http | 6.2.8 | |||
| Application | Wso2 | Transport-http | 6.2.7 | |||
| Application | Wso2 | Transport-http | 6.2.6 | |||
| Application | Wso2 | Transport-http | 6.2.5 | |||
| Application | Wso2 | Transport-http | 6.2.4 | |||
| Application | Wso2 | Transport-http | 6.2.34 | |||
| Application | Wso2 | Transport-http | 6.2.33 | |||
| Application | Wso2 | Transport-http | 6.2.32 | |||
| Application | Wso2 | Transport-http | 6.2.31 | |||
| Application | Wso2 | Transport-http | 6.2.30 |