| Package | Affected versions | Patched versions |
|---|---|---|
| aloha | ≥ 16.5.0.0, < 16.5.30≥ 17.0.0, < 17.0.18≥ 17.5.0, < 17.5.16 | 16.5.3017.0.1817.5.16 |
| haproxy | ≥ 3.0.0, < 3.0.16≥ 3.1, < 3.1.14≥ 3.2, < 3.2.12≥ 3.3, < 3.3.3 | 3.0.163.1.143.2.123.3.3 |
| haproxy enterprise | = 3.0r1= 3.1r1= 3.2r1 |
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free