Apache Traffic Server vulnerabilities
121 published vulnerabilities in Apache Traffic Server, 1 of them exploited in the wild. The most were published in 2026 (39), and 39 so far in 2026.
Apache Traffic Server vulnerabilities by year
2010
2012
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Apache Traffic Server vulnerabilities
- CVE-2023-44487 HTTP/2 Rapid Reset Attack
- CVE-2014-3525 Other in n/a
- CVE-2021-43082 heap-buffer-overflow with stats-over-http plugin
- CVE-2021-35474 Dynamic stack buffer overflow in cachekey plugin
- CVE-2019-17559 Other in Apache Traffic Server
- CVE-2019-17565 Other in Apache Traffic Server
- CVE-2020-1944 Other in Apache Traffic Server
- CVE-2014-3624 Security feature bypass in n/a
- CVE-2015-3249 Memory corruption in n/a
- CVE-2015-5168 Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vecto
- CVE-2015-5206 Other in n/a
- CVE-2026-58154 Apache Traffic Server: Memory-safety errors in MIME and header parsing
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.