Apache Apisix Vulnerabilities

Apache Apache Apisix vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

19 June 2026

Improper Authentication Vulnerability in Apache APISIX by Apache
CVE-2026-49872
ApacheApache Apisix5.3MEDIUM
Cross-Site Request Forgery Vulnerability in Apache APISIX by Apache
CVE-2026-49871
ApacheApache Apisix2.1LOW
Authentication Bypass Vulnerability in Apache APISIX
CVE-2026-47341
ApacheApache Apisix6.3MEDIUM
Open Redirect Vulnerability in Apache APISIX by Apache
CVE-2026-48895
ApacheApache Apisix2.1LOW
Authentication Bypass Vulnerability in Apache APISIX OPA Plugin
CVE-2026-49231
ApacheApache Apisix2.3LOW
Authentication Bypass Vulnerability in Apache APISIX Plugin
CVE-2026-49230
ApacheApache Apisix6.3MEDIUM
Open Redirect Vulnerability in Apache APISIX by Apache
CVE-2026-44915
ApacheApache Apisix2.1LOW
Insufficient Data Authenticity Verification in Apache APISIX OpenID Connect Plugin
CVE-2026-44087
ApacheApache Apisix5.3MEDIUM
Incorrect Authorization Vulnerability in Apache APISIX by Apache
CVE-2026-47339
ApacheApache Apisix5.3MEDIUM
Less Trusted Source Vulnerability in Apache APISIX by Apache
CVE-2026-44046
ApacheApache Apisix2.3LOW
Authentication Bypass Vulnerability in Apache APISIX by Apache
CVE-2026-39999
ApacheApache Apisix7HIGH
Improper Input Validation in Apache APISIX Affects Identity Header Spoofing
CVE-2026-39998
ApacheApache Apisix5.8MEDIUM

14 April 2026

31 October 2025

Sensitive Data Exposure Vulnerability in Apache APISIX by Apache
CVE-2025-62232
ApacheApache Apisix7.5HIGH

6 July 2025

Incorrect Permission Assignment in Apache APISIX Plugin Runner
CVE-2025-27446
ApacheApache Apisix Java Plu...7.8HIGH

2 July 2025

Vulnerability in OpenID Connect Plugin for Apache APISIX
CVE-2025-46647
ApacheApache Apisix5.3MEDIUM

2 May 2024

Inconsistent Interpretation of HTTP Requests Vulnerability in Apache APISIX
CVE-2024-32638
ApacheApache Apisix📰6.3MEDIUM

20 April 2022

apisix/jwt-auth may leak secrets in error response
CVE-2022-29266
ApacheApache Apisix7.5HIGH

28 March 2022

Apache APISIX: the body_schema check in request-validation plugin can be bypassed
CVE-2022-25757
ApacheApache Apisix9.8CRITICAL

11 February 2022

apisix/batch-requests plugin allows overwriting the X-REAL-IP header
CVE-2022-24112
ApacheApache Apisix👾🟡EPSS 96%🦅9.8CRITICAL

27 December 2021

security vulnerability on unauthorized access.
CVE-2021-45232
ApacheApache Apisix Dashboard👾🟡EPSS 85%9.8CRITICAL

22 November 2021

Path traversal in request_uri variable
CVE-2021-43557
ApacheApache Apisix👾🟡EPSS 14%7.5HIGH

8 June 2021

Bypass network access control
CVE-2021-33190
ApacheApache Apisix Dashboard5.3MEDIUM