# Apache Traffic Server


- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2014-3525](https://insights.sbomify.com/CVE-2014-3525/): Other in n/a (critical 10.0)
- [CVE-2021-43082](https://insights.sbomify.com/CVE-2021-43082/): heap-buffer-overflow with stats-over-http plugin (critical 9.8)
- [CVE-2021-35474](https://insights.sbomify.com/CVE-2021-35474/): Dynamic stack buffer overflow in cachekey plugin (critical 9.8)
- [CVE-2019-17559](https://insights.sbomify.com/CVE-2019-17559/): Other in Apache Traffic Server (critical 9.8)
- [CVE-2019-17565](https://insights.sbomify.com/CVE-2019-17565/): Other in Apache Traffic Server (critical 9.8)
- [CVE-2020-1944](https://insights.sbomify.com/CVE-2020-1944/): Other in Apache Traffic Server (critical 9.8)
- [CVE-2014-3624](https://insights.sbomify.com/CVE-2014-3624/): Security feature bypass in n/a (critical 9.8)
- [CVE-2015-3249](https://insights.sbomify.com/CVE-2015-3249/): Memory corruption in n/a (critical 9.8)
- [CVE-2015-5168](https://insights.sbomify.com/CVE-2015-5168/): Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vecto (critical 9.8)
- [CVE-2015-5206](https://insights.sbomify.com/CVE-2015-5206/): Other in n/a (critical 9.8)
- [CVE-2026-58154](https://insights.sbomify.com/CVE-2026-58154/): Apache Traffic Server: Memory-safety errors in MIME and header parsing (critical 9.2)

---
From sbomify Insights: https://insights.sbomify.com/products/apache/traffic-server/