HAProxy 2.6.35 → 3.3.17
19 releases · 0 breaking changes · 0 security fixes · 2 advisories fixed
0security0breaking0deprecated0feature0fix
Vulnerabilities fixed by this upgrade
- 4.0 CVE-2026-33555 An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame w…
- 8.2 CVE-2023-45539 HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end…
Breaking changes
None in the release notes.
Security changes
None in the release notes.