CVE-2026-94269: Apache APISIX: Servlet-style normalization creates a route/upstream authorization mismatch
Apache APISIX 2.14.1–3.18.0 can let encoded paths bypass route authorization and reach protected upstreams.
Stories per day · 30 days
1 stories, newest first · one card per story