CVE-2026-41920

概要

参考情報

• lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d · Vendor Advisory

traffic server のその他の脆弱性

• CVE-2026-65100中 4.8Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure l…
• CVE-2026-58189高 7.5Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This issue affects …
• CVE-2026-58188高 8.2Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apache Traffic Server: …
• CVE-2026-58187高 7.5The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue a…
• CVE-2026-58186高 7.5The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This issue affects Apache …