Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 23:22:13 +0000 CVE-2026-94250 — Apache APISIX: Batch response aggregation can exhaust worker memory https://vulnerability.circl.lu/vuln/cve-2026-94250 <p><strong>Affected:</strong> Apache Software Foundation Apache APISIX</p> <p>Allocation of resources without limits or throttling vulnerability in batch-requests plugin in Apache APISIX.</p> <p>An unauthenticated caller can drive a gateway worker into OOM via a route where the batch-requests plugin is used and the batch endpoint is publicly exposed. This issue affects Apache APISIX: from 1.3.0 through 3.18.0.</p> <p>Users are recommended to upgrade to version 3.19.0, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache APISIX</p> <p>Allocation of resources without limits or throttling vulnerability in batch-requests plugin in Apache APISIX.</p> <p>An unauthenticated caller can drive a gateway worker into OOM via a route where the batch-requests plugin is used and the batch endpoint is publicly exposed. This issue affects Apache APISIX: from 1.3.0 through 3.18.0.</p> <p>Users are recommended to upgrade to version 3.19.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/cve-2026-94250