[CVE-2026-110353 ] Published: Oct 22, 2026, 2:53:33 AM UTC
haproxy: CVE-2026-110353
High(7.5) Affected Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Affected
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Affected
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Affected
dsa · haproxy · debian · 13
[CVE-2026-110354 ] Published: Oct 22, 2026, 2:46:38 AM UTC
haproxy: CVE-2026-110354
High(7.5) Affected Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Affected · Fixed: 3.0.11-1+deb13u4
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Affected · Fixed: 3.0.11-1+deb13u4
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 3.0.11-1+deb13u4
dsa · haproxy · debian · 13
[CVE-2026-55204 ] Published: Jun 18, 2026, 4:05:52 PM UTC
HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_def
High(8.7) Affected Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Affected
nvd · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Affected
nvd · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Affected
nvd · haproxy · debian · 13
[CVE-2026-55203 ] Published: Jun 18, 2026, 4:05:20 PM UTC
HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLe
Critical(9) Affected Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Affected
nvd · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Affected
nvd · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Affected
nvd · haproxy · debian · 13
[CVE-2023-0056 ] Published: Jan 15, 2023, 11:00:00 PM UTC
haproxy: CVE-2023-0056
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 7:24:01 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · 13
[CVE-2023-0836 ] Published: Jan 1, 2023, 12:00:00 AM UTC
haproxy: CVE-2023-0836
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 7:24:38 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · 13
[CVE-2021-40346 ] Published: Sep 7, 2021, 12:00:00 AM UTC
haproxy: CVE-2021-40346
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:02:24 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 2.2.16-3
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 2.2.16-3
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 2.2.16-3
dsa · haproxy · debian · 13
[CVE-2021-39242 ] Published: Aug 17, 2021, 7:15:08 PM UTC
haproxy: CVE-2021-39242
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:01:57 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · 13
[CVE-2021-39241 ] Published: Aug 17, 2021, 7:15:00 PM UTC
haproxy: CVE-2021-39241
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:01:56 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · 13
[CVE-2021-39240 ] Published: Aug 17, 2021, 12:00:00 AM UTC
haproxy: CVE-2021-39240
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:01:56 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · 13
[CVE-2020-11100 ] Published: Apr 2, 2020, 12:00:00 AM UTC
haproxy: CVE-2020-11100
High(8.8) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:46:51 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 2.0.13-2
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 2.0.13-2
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 2.0.13-2
dsa · haproxy · debian · 13
[CVE-2019-19330 ] Published: Nov 25, 2019, 12:00:00 AM UTC
haproxy: CVE-2019-19330
Medium(5.9) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:42:53 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 2.0.10-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 2.0.10-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 2.0.10-1
dsa · haproxy · debian · 13
[CVE-2019-18277 ] Published: Sep 13, 2019, 12:00:00 AM UTC
haproxy: CVE-2019-18277
Medium(6.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:41:58 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 2.0.6-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 2.0.6-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 2.0.6-1
dsa · haproxy · debian · 13
[CVE-2018-20102 ] Published: Dec 12, 2018, 12:00:00 AM UTC
haproxy: CVE-2018-20102
Medium(6.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:35:56 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 1.8.15-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 1.8.15-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 1.8.15-1
dsa · haproxy · debian · 13
[CVE-2018-20103 ] Published: Dec 12, 2018, 12:00:00 AM UTC
haproxy: CVE-2018-20103
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:35:56 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 1.8.15-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 1.8.15-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 1.8.15-1
dsa · haproxy · debian · 13
[CVE-2018-14645 ] Published: Sep 20, 2018, 12:00:00 PM UTC
haproxy: CVE-2018-14645
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:34:49 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 1.8.13-2
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 1.8.13-2
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 1.8.13-2
dsa · haproxy · debian · 13
[CVE-2018-11469 ] Published: May 25, 2018, 12:00:00 AM UTC
haproxy: CVE-2018-11469
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:33:43 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 1.8.9-2
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 1.8.9-2
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 1.8.9-2
dsa · haproxy · debian · 13
[CVE-2018-10184 ] Published: Apr 19, 2018, 12:00:00 AM UTC
haproxy: CVE-2018-10184
High(8.6) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:32:51 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 1.8.8-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 1.8.8-1
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 1.8.8-1
dsa · haproxy · debian · 13
[CVE-2018-20615 ] Published: Jan 1, 2018, 12:00:00 AM UTC
haproxy: CVE-2018-20615
High(8.2) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:36:04 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 1.8.16-2
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 1.8.16-2
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 1.8.16-2
dsa · haproxy · debian · 13
[CVE-2016-5360 ] Published: Jun 10, 2016, 12:00:00 AM UTC
haproxy: CVE-2016-5360
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:22:18 PM UTC
Details (3) 3.0.11-1+deb13u3 · amd64 · trixie-security · Historical version
Fixed · Fixed: 1.6.5-2
dsa · haproxy · debian · 13
3.0.11-1+deb13u3 · arm64 · trixie-security
Fixed · Fixed: 1.6.5-2
dsa · haproxy · debian · 13
3.0.11-1+deb13u4 · amd64 · trixie-security
Fixed · Fixed: 1.6.5-2
dsa · haproxy · debian · 13