Explore

Theme

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

CVE-2025-11230 — HIGH severity vulnerability | Release Alert

CVE-2025-11230

7.5

HIGHCVSS v3

Published

November 19, 2025

Affected

5 projects

Assigned by

Severity scale

010

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

GitHubHAProxy Load Balancer's development branch (mirror of git.haproxy.org)

>= 2.4.0, < 2.4.30, >= 2.6.0, < 2.6.23, >= 2.8.0, < 2.8.16, >= 3.0.0, < 3.0.12, >= 3.1.0, < 3.1.9, >= 3.2.0, < 3.2.6NVD

NPMHAProxy management and orchestration module

>= 2.4.0, < 2.4.30, >= 2.6.0, < 2.6.23, >= 2.8.0, < 2.8.16, >= 3.0.0, < 3.0.12, >= 3.1.0, < 3.1.9, >= 3.2.0, < 3.2.6NVD

Docker HubHAProxy - The Reliable, High Performance TCP/HTTP Load Balancer

>= 2.4.0, < 2.4.30, >= 2.6.0, < 2.6.23, >= 2.8.0, < 2.8.16, >= 3.0.0, < 3.0.12, >= 3.1.0, < 3.1.9, >= 3.2.0, < 3.2.6NVD

RubyGemsThis gem is intended for use as a HAProxy interface when you need to read statistics or if you like to manage proxies thru Ruby

>= 2.4.0, < 2.4.30, >= 2.6.0, < 2.6.23, >= 2.8.0, < 2.8.16, >= 3.0.0, < 3.0.12, >= 3.1.0, < 3.1.9, >= 3.2.0, < 3.2.6NVD

GitHubHAProxy management and orchestration

>= 2.4.0, < 2.4.30, >= 2.6.0, < 2.6.23, >= 2.8.0, < 2.8.16, >= 3.0.0, < 3.0.12, >= 3.1.0, < 3.1.9, >= 3.2.0, < 3.2.6NVD