Approved changes feed: RSS · Atom

cpe:2.3:a:apache:apisix:3.9.0:*:*:*:*:*:*:*

part: a version: 3.9.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductApisix (1d25eca5-12cb-5103-b557-31380727ab1e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/apisix purl2cpe 2026-06-01 10:14:31.110056
pkg:docker/apache/apisix purl2cpe 2026-06-01 10:14:31.110057
pkg:github/apache/apisix purl2cpe 2026-06-01 10:14:31.110059
pkg:sourceforge/apache-apisix.mirror purl2cpe 2026-06-01 10:14:31.110060

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32638 vulnerable 2026-06-08 06:37:23.485329 Apache APISIX: Forward-Auth Request Smuggling
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Apache APISIX when using `forward-auth` plugin.This issue affects Apache APISIX: from 3.8.0, 3.9.0. Users are recommended to upgrade to version 3.8.1, 3.9.1 or higher, which fixes the issue.
Published: 2024-05-02T09:20:29.127Z
Updated: 2025-02-13T17:52:13.382Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.