Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 06:57:09 +0000 fkie_cve-2026-82806 https://db.gcve.eu/vuln/fkie_cve-2026-82806 <p>Exposure of data element to wrong session vulnerability in Apache APISIX.</p> <p>This issue affects Apache APISIX: from 2.3.0 before 3.7.0.</p> <p>Under a supported authz-keycloak configuration, a request&#39;s authorization scope could persist into later requests on the same route, leading to unintended authorization expansion and inconsistent access-control decisions.</p> <p>Users are recommended to upgrade to version 3.7.0 or higher, which fixes the issue.</p> <p>Exposure of data element to wrong session vulnerability in Apache APISIX.</p> <p>This issue affects Apache APISIX: from 2.3.0 before 3.7.0.</p> <p>Under a supported authz-keycloak configuration, a request&#39;s authorization scope could persist into later requests on the same route, leading to unintended authorization expansion and inconsistent access-control decisions.</p> <p>Users are recommended to upgrade to version 3.7.0 or higher, which fixes the issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-82806 GHSA-2252-4rmp-q4vj https://db.gcve.eu/vuln/ghsa-2252-4rmp-q4vj <p>Exposure of data element to wrong session vulnerability in Apache APISIX.</p> <p>This issue affects Apache APISIX: from 2.3.0 before 3.7.0.</p> <p>Under a supported authz-keycloak configuration, a request&#39;s authorization scope could persist into later requests on the same route, leading to unintended authorization expansion and inconsistent access-control decisions.</p> <p>Users are recommended to upgrade to version 3.7.0 or higher, which fixes the issue.</p> <p>Exposure of data element to wrong session vulnerability in Apache APISIX.</p> <p>This issue affects Apache APISIX: from 2.3.0 before 3.7.0.</p> <p>Under a supported authz-keycloak configuration, a request&#39;s authorization scope could persist into later requests on the same route, leading to unintended authorization expansion and inconsistent access-control decisions.</p> <p>Users are recommended to upgrade to version 3.7.0 or higher, which fixes the issue.</p> https://db.gcve.eu/vuln/ghsa-2252-4rmp-q4vj