OpenResty 1.25.3.1
Approved changes feed: RSS · Atom
cpe:2.3:a:openresty:openresty:1.25.3.1:*:*:*:*:*:*:*
part: a version: 1.25.3.1 update: *
| Vendor | Openresty (87c1b39d-c7a5-5234-9d7d-37a6949a9dfc) |
|---|---|
| Product | Openresty (e5d8c094-7d5c-58ca-92a3-282e9ab1c9d9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openresty/openresty |
purl2cpe | 2026-06-01 10:17:54.740283 |
pkg:rpm/opensuse/openresty |
purl2cpe | 2026-06-01 10:17:54.740284 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-39702 |
vulnerable | 2026-06-08 06:41:51.424055 |
Details available
In lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during string interning) allows HashDoS (Hash Denial of Service) attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service with relatively few incoming requests. This vulnerability only exists in the OpenResty fork in the openresty/luajit2 GitHub repository. The LuaJIT/LuaJIT repository. is unaffected.
Published: 2024-07-23T00:00:00.000Z
Updated: 2024-11-26T17:58:14.207Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.