Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

Project Subscriptions

Vendors Products
Haproxy Subscribe
Aloha Appliance Subscribe
Haproxy Subscribe
Haproxy Enterprise Subscribe
Kubernetes Ingress Controller Subscribe
Advisories
Source ID Title
Debian DSA Debian DSA DSA-6017-1 haproxy security update
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Fri, 19 Dec 2025 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Haproxy aloha Appliance
Haproxy haproxy Enterprise
Haproxy kubernetes Ingress Controller
CPEs cpe:2.3:a:haproxy:aloha_appliance:*:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-253.271:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-254.271:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-259.342:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-263.343:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-264.356:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.356:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.373:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.459:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.464:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.477:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.499:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.553:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.560:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.564:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.596:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-269.596:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-269.599:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-270.616:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-271.673:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-271.677:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-272.683:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-272.686:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-272.728:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-274.752:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-276.752:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-277.814:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-277.831:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-278.838:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.852:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.859:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.877:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.911:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.940:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.952:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.953:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.956:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-280.956:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-282.998:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-282.999:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-284.999:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-285.1010:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1064:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1068:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1089:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1094:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1094:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1158:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1167:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1189:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-289.1189:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-290.1239:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-291.1246:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-292.1293:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1346:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1364:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1376:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1377:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1442:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-281.466:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-282.561:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.562:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.565:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.616:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.632:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.633:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.636:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-284.636:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-285.726:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-285.727:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-287.727:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.770:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.773:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.848:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.849:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.1020:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.1028:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.1041:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.873:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.975:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.976:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-291.1046:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1046:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1055:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1120:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1147:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1148:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1156:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1181:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1187:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-293.1189:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-293.1190:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-294.1212:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-294.1285:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-295.1303:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-296.1392:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-296.1416:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1416:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1474:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1487:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1511:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1542:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1557:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1596:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1603:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1606:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1618:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-300.1666:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-301.1666:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-302.234:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-304.266:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-305.279:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-305.285:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-306.288:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-306.289:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-307.317:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.350:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.364:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.373:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.374:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.418:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.422:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.424:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-311.449:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-311.452:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-311.453:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-312.592:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-312.613:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-317.613:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-318.674:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-319.699:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-319.723:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.750:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.761:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.770:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.780:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.781:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.783:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.831:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.851:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.853:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.895:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.895:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.901:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.919:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.931:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.934:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.937:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-322.942:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.1030:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.1071:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.1072:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.947:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-326.1073:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.363:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.390:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.394:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.395:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.405:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.415:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.455:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.466:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.471:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-341.475:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-342.482:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.495:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.503:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.561:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.564:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.591:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.608:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.641:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.655:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.672:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-345.673:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-346.792:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-345.233:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-346.274:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-346.287:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.299:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.338:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.362:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.405:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.419:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.431:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.449:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-348.519:*:*:*:*:*:*
cpe:2.3:a:haproxy:kubernetes_ingress_controller:*:*:*:*:community:*:*:*
cpe:2.3:a:haproxy:kubernetes_ingress_controller:*:*:*:*:enterprise:*:*:*
Vendors & Products Haproxy aloha Appliance
Haproxy haproxy Enterprise
Haproxy kubernetes Ingress Controller

Mon, 24 Nov 2025 09:15:00 +0000

Type Values Removed Values Added
First Time appeared Haproxy
Haproxy haproxy
Vendors & Products Haproxy
Haproxy haproxy

Wed, 19 Nov 2025 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 19 Nov 2025 09:45:00 +0000

Type Values Removed Values Added
Description A flaw was found in haproxy. A stemming from an inefficient algorithmic complexity issue within its bundled mjson parsing library. This vulnerability is triggered when haproxy is configured to analyze JSON content, such as with the json_query or jwt_payload_query function Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.
Title haproxy: denial of service vulnerability in HAProxy mjson library Denial of service vulnerability in HAProxy mjson library
References

Fri, 07 Nov 2025 00:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in haproxy. A stemming from an inefficient algorithmic complexity issue within its bundled mjson parsing library. This vulnerability is triggered when haproxy is configured to analyze JSON content, such as with the json_query or jwt_payload_query function
Title haproxy: denial of service vulnerability in HAProxy mjson library
Weaknesses CWE-407
References
Metrics threat_severity

None

cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Important


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: canonical

Published:

Updated: 2025-11-19T17:09:15.642Z

Reserved: 2025-10-01T13:10:26.249Z

Link: CVE-2025-11230

cve-icon Vulnrichment

Updated: 2025-11-19T17:09:02.607Z

cve-icon NVD

Status : Analyzed

Published: 2025-11-19T10:15:45.020

Modified: 2025-12-19T16:44:55.433

Link: CVE-2025-11230

cve-icon Redhat

Severity : Important

Publid Date: 2025-10-03T00:00:00Z

Links: CVE-2025-11230 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-11-24T09:10:42Z

Weaknesses