Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2026-55233 OpenResty is a high performance web platform. From 1.29.2.1 to before 1.29.2.5, an out-of-bounds write vulnerability exists in the upstream PROXY pro… Openresty 1.29.2.5+ Fix from $1,9502026-07-10 HIGH 7.7 CVE-2024-33452 An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request. Lua Nginx Module after 0.10.26 Fix from $1,9502025-04-22 MEDIUM 5.9 CVE-2024-39702 In lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during string interning) allows HashDoS (Hash Denial of Se… Openresty 1.19.9.2 / 1.21.4.4+ Fix from $1,6002024-07-23 MEDIUM 5.3 CVE-2020-36309 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or… Lua Nginx Module 0.10.16+ Fix from $1,6002021-04-06 CRITICAL 9.8 CVE-2018-9230EPSS 13% In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.get_uri_args and ngx.req.get_post_args functions that ignore parameters … Openresty 1.13.6.1+ Fix from $2,3002018-04-02