Haproxy: >> Haproxy Enterprise >> 3.1r1 Security Vulnerabilities
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
CVSS Score
4.8
EPSS Score
0.005
Published
2026-07-20
Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.
CVSS Score
7.5
EPSS Score
0.007
Published
2025-11-19