VYPR

Apache APISIX

by Apache

CVEs (1)

  • CVE-2026-94250HigOct 1, 2026
    risk 0.53cvss —epss 0.00

    Allocation of resources without limits or throttling vulnerability in batch-requests plugin in Apache APISIX. An unauthenticated caller can drive a gateway worker into OOM via a route where the batch-requests plugin is used and the batch endpoint is publicly exposed. This…