Apache Apisix Vulnerabilities

Apache Apache Apisix vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

6 July 2025

Incorrect Permission Assignment in Apache APISIX Plugin Runner
CVE-2025-27446
ApacheApache Apisix Java Plu...7.8HIGH

2 July 2025

Vulnerability in OpenID Connect Plugin for Apache APISIX
CVE-2025-46647
ApacheApache Apisix5.3MEDIUM

2 May 2024

Inconsistent Interpretation of HTTP Requests Vulnerability in Apache APISIX
CVE-2024-32638
ApacheApache Apisix📰6.3MEDIUM

20 April 2022

apisix/jwt-auth may leak secrets in error response
CVE-2022-29266
ApacheApache ApisixEPSS 36%7.5HIGH

28 March 2022

Apache APISIX: the body_schema check in request-validation plugin can be bypassed
CVE-2022-25757
ApacheApache Apisix9.8CRITICAL

11 February 2022

apisix/batch-requests plugin allows overwriting the X-REAL-IP header
CVE-2022-24112
ApacheApache Apisix👾🟡EPSS 94%🦅9.8CRITICAL

27 December 2021

security vulnerability on unauthorized access.
CVE-2021-45232
ApacheApache Apisix Dashboard👾🟡EPSS 94%9.8CRITICAL

22 November 2021

Path traversal in request_uri variable
CVE-2021-43557
ApacheApache Apisix👾🟡EPSS 58%7.5HIGH

8 June 2021

Bypass network access control
CVE-2021-33190
ApacheApache Apisix Dashboard5.3MEDIUM

7 December 2020

Remote Code Execution in Apache APISIX due to Open Admin API Access
CVE-2020-13945
ApacheApache Apisix👾🟡EPSS 93%6.5MEDIUM