NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#apache-apisix

0 stories this week · 4 this month · 4 in 6 months · mostly security

Stories per day · 30 days

Relatedapi-gateway3 authentication-bypass1 authorization1 batch-requests1 csrf1 cve-2026-828061 cve-2026-942121 cve-2026-942201 cve-2026-942501 denial-of-service1 dingtalk1 feishu1 impersonation1 keycloak1 oom1 saml1 session1 session-fixation1

1 stories, newest first · one card per story

oss-security29d agohigh

CVE-2026-94250: Apache APISIX: Batch response aggregation can exhaust worker memory

Unauthenticated callers can exhaust Apache APISIX worker memory via the batch-requests plugin (CVE-2026-94250).

6 sources apache-apisix cve-2026-94250

6