Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-11230

Denial of service vulnerability in HAProxy mjson library

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
canonical

Description

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HAProxy Technologies HAProxy Community Edition

Default version status: unaffected

  • 2.4.0 to < 2.4.30affected
  • 2.6.0 to < 2.6.23affected
  • 2.8.0 to < 2.8.16affected
  • 3.0.0 to < 3.0.12affected
  • 3.1.0 to < 3.1.9affected
  • 3.2.0 to < 3.2.6affected

References