https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 19:28:52 +0000 https://db.gcve.eu/vuln/ghsa-57rc-r5x5-7j4r <p>Authentication bypass by spoofing vulnerability in Apache APISIX.</p> <p>On a route where multi-auth falls back from wolf-rbac to another successful authenticator, client-supplied Wolf identity headers can remain in the request. A downstream service that relies on those documented headers may therefore receive an identity that was not established by the successful authenticator.</p> <p>This issue affects Apache APISIX: from 3.8.0 through 3.19.0.</p> <p>Users are recommended to upgrade to version 3.20.0, which fixes the issue.</p> <p>Authentication bypass by spoofing vulnerability in Apache APISIX.</p> <p>On a route where multi-auth falls back from wolf-rbac to another successful authenticator, client-supplied Wolf identity headers can remain in the request. A downstream service that relies on those documented headers may therefore receive an identity that was not established by the successful authenticator.</p> <p>This issue affects Apache APISIX: from 3.8.0 through 3.19.0.</p> <p>Users are recommended to upgrade to version 3.20.0, which fixes the issue.</p> https://db.gcve.eu/vuln/ghsa-57rc-r5x5-7j4r