UpHeron
All vulnerabilities

Servers and applications

CVE-2025-11230

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

Severity
High 7.5
Published
19 Nov 2025
Last changed
18 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
2.4.30, 2.6.23, 2.8.16, 3.0.12, 3.1.9, 3.2.6
Sources
NVD

Affected software

SoftwareAffected versions
HAProxyServers and applications · cpe:a:haproxy:haproxy
  • From 2.4.0 before 2.4.30
  • From 2.6.0 before 2.6.23
  • From 2.8.0 before 2.8.16
  • From 3.0.0 before 3.0.12
  • From 3.1.0 before 3.1.9
  • From 3.2.0 before 3.2.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-11230
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-11230