https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T23:40:10.116018+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bit-apisix-2026-74848 BIT-apisix-2026-74848 — Apache APISIX: Cross-user response poisoning in serverless plugins 2026-10-02T23:40:10.135786+00:00

Affected: Bitnami: apisix

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX.

An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes.

This issue affects Apache APISIX: from 2.12.0 through 3.17.0.

Users are recommended to upgrade to version 3.18.0, which fixes the issue.

 https://db.gcve.eu/vuln/fkie_cve-2026-74848 fkie_cve-2026-74848 2026-10-02T23:40:10.135858+00:00

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX.

An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes.

This issue affects Apache APISIX: from 2.12.0 through 3.17.0.

Users are recommended to upgrade to version 3.18.0, which fixes the issue.

 https://db.gcve.eu/vuln/ghsa-3g86-xcpq-wppj GHSA-3g86-xcpq-wppj 2026-10-02T23:40:10.135891+00:00

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX.

An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes.

This issue affects Apache APISIX: from 2.12.0 through 3.17.0.

Users are recommended to upgrade to version 3.18.0, which fixes the issue.