| Package | Affected versions | Patched versions |
|---|---|---|
| haproxy | = 3.1≥ 2.9.0, < 2.9.10≥ 3.0.0, < 3.0.4 | 2.9.103.0.4 |
HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding (h2_send loop) under a certain set of conditions, as exploited in the wild in 2024.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free