Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-40346 — HIGH severity vulnerability | Release Alert

CVE-2021-40346

7.5

HIGHCVSS v3

Published

September 8, 2021

CVSS v2

5 MEDIUM

Affected

9 projects

Assigned by

MITRE

Severity scale

010

Description

An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.

haproxy/haproxy

GitHubHAProxy Load Balancer's development branch (mirror of git.haproxy.org)

>= 2.4.0, < 2.4.4, >= 2.3.0, < 2.3.14, >= 2.2.0, < 2.2.17, >= 2.0.0, < 2.0.25, = 2.5NVD

NPMHAProxy management and orchestration module

>= 2.4.0, < 2.4.4, >= 2.3.0, < 2.3.14, >= 2.2.0, < 2.2.17, >= 2.0.0, < 2.0.25, = 2.5NVD

More on this CVE

NVD↗GitHub Advisory↗

RubyGems

This gem is intended for use as a HAProxy interface when you need to read statistics or if you like to manage proxies thru Ruby

>= 2.4.0, < 2.4.4, >= 2.3.0, < 2.3.14, >= 2.2.0, < 2.2.17, >= 2.0.0, < 2.0.25, = 2.5NVD

observing/haproxy

GitHubHAProxy management and orchestration

>= 2.4.0, < 2.4.4, >= 2.3.0, < 2.3.14, >= 2.2.0, < 2.2.17, >= 2.0.0, < 2.0.25, = 2.5NVD

Crates.ioBase library for interacting with Fedora web services

= 33, = 34NVD

Python Package IndexPlaceholder for the fedora name

= 33, = 34NVD

Docker HubOfficial Docker builds of Fedora

= 33, = 34NVD

NPMDigital Repository Ireland - fedora backend operations

= 33, = 34NVD

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 33, = 34NVD