trafficserver

Direct Vulnerabilities

Known vulnerabilities in the trafficserver package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L HTTP Request Smuggling	*
H Out-of-bounds Write	*
C Deserialization of Untrusted Data	*
L Incorrect Authorization	*
L Stack-based Buffer Overflow	*
H Out-of-bounds Write	*
L Out-of-bounds Write	*
M Regular Expression without Anchors	*
L Memory Leak	*
L Out-of-bounds Write	*
L Improper Certificate Validation	*
C Out-of-bounds Write	*
M HTTP Request Smuggling	*
L Resource Exhaustion	*
L HTTP Request Smuggling	*
L Stack-based Buffer Overflow	*
H Improper Input Validation	*
L Incorrect Behavior Order	*
L Stack-based Buffer Overflow	*
L Improper Input Validation	*
C Stack-based Buffer Overflow	*
L HTTP Request Smuggling	*
L Use After Free	*
C CVE-2026-33267	*
L Improper Access Control	*
C Use After Free	*
L Integer Overflow or Wraparound	*
L Server-Side Request Forgery (SSRF)	*
L Resource Exhaustion	*
L Stack-based Buffer Overflow	*
L NULL Pointer Dereference	*
L Incorrect Authorization	*
L Out-of-bounds Read	*
L Information Exposure	*
L HTTP Request Smuggling	*
L Uncontrolled Recursion	*
L Improper Certificate Validation	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L HTTP Request Smuggling	*
L Always-Incorrect Control Flow Implementation	*
L Resource Exhaustion	*
L Improper Access Control	*
L HTTP Request Smuggling	*
L CVE-2024-56195	*
L CVE-2024-56202	*
L CVE-2024-38311	*
L Unchecked Return Value	*
L CVE-2024-38479	*
L Improper Input Validation	*
H CVE-2024-35296	<9.2.5+ds-1
H HTTP Request Smuggling	<9.2.5+ds-1
H HTTP Request Smuggling	<9.2.5+ds-1
L CVE-2024-31309	<9.2.4+ds-1
H Improper Input Validation	<9.2.3+ds-1
H Information Exposure	<9.2.3+ds-1
H CVE-2023-44487	<9.2.3+ds-1
C HTTP Request Smuggling	<9.2.2+ds-1
H Improper Input Validation	<9.2.2+ds-1
H Information Exposure	<9.2.1+ds-1
H Improper Input Validation	<9.2.1+ds-1
H Information Exposure	<9.2.1+ds-1
M Improper Check for Unusual or Exceptional Conditions	<9.1.4+ds-1
M Cross-site Scripting (XSS)	<9.1.4+ds-1
H Improper Check for Unusual or Exceptional Conditions	<9.1.4+ds-1
H Improper Input Validation	<9.1.3+ds-1
H Improper Input Validation	<9.1.3+ds-1
H Improper Input Validation	<9.1.3+ds-1
H Improper Input Validation	<9.1.3+ds-1
H Improper Input Validation	<9.1.3+ds-1
H HTTP Request Smuggling	<9.1.3+ds-1
H Improper Authentication	<9.1.0+ds-1
H Improper Input Validation	<9.1.2+ds-1
H Improper Authentication	<9.1.0+ds-1
H Improper Input Validation	<9.1.1+ds-1
H Improper Input Validation	<9.1.1+ds-1
C Buffer Overflow	<9.1.1+ds-1
H Improper Input Validation	<9.1.1+ds-1
H Improper Input Validation	<8.1.1+ds-1.1
C Out-of-bounds Write	<8.1.1+ds-1.1
H Improper Input Validation	<8.1.1+ds-1.1
H HTTP Request Smuggling	<8.1.1+ds-1.1
H HTTP Request Smuggling	<8.1.1+ds-1.1
H HTTP Request Smuggling	<8.1.1+ds-1
H Information Exposure	<8.1.1+ds-1
H Out-of-Bounds	<8.0.8+ds-1
H Resource Exhaustion	<8.0.7+ds-1
C HTTP Request Smuggling	<8.0.6+ds-1
C HTTP Request Smuggling	<8.0.6+ds-1
C HTTP Request Smuggling	<8.0.6+ds-1
H Improper Input Validation	<8.0.5+ds-1
H Allocation of Resources Without Limits or Throttling	<8.0.5+ds-1
H Allocation of Resources Without Limits or Throttling	<8.0.5+ds-1
H Allocation of Resources Without Limits or Throttling	<8.0.5+ds-1
H Resource Exhaustion	<8.0.5+ds-1
H Information Exposure	<8.0.2+ds-1
H Improper Input Validation	<7.0.0-1
M Resource Exhaustion	<7.1.4+ds-1
M Exposure of Resource to Wrong Sphere	<7.1.4+ds-1
M HTTP Request Smuggling	<7.1.4+ds-1
H Improper Input Validation	<7.1.4+ds-1
H Improper Input Validation	<7.1.2+ds-1
H Improper Input Validation	<7.1.2+ds-1
C Improper Access Control	<5.0.0-1
C Out-of-Bounds	<5.3.1-1
C CVE-2015-5206	<6.0.0-1
C CVE-2015-5168	<6.0.0-1
H Improper Input Validation	<7.0.0-1
H Resource Management Errors	<7.0.0-1
M Out-of-Bounds	<5.2.0-1
L CVE-2014-3525	<5.0.1-1
M Out-of-Bounds	<3.0.4-1

Vulnerability

Vulnerable Version

HTTP Request Smuggling