Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.
References
| Link | Resource |
|---|---|
| https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
18 Oct 2026, 20:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
Information
Published : 2025-11-19 10:15
Updated : 2026-10-18 20:10
NVD link : CVE-2025-11230
Mitre link : CVE-2025-11230
CVE.ORG link : CVE-2025-11230
JSON object : View
Products Affected
haproxy
- haproxy
- aloha_appliance
- kubernetes_ingress_controller
- haproxy_enterprise
CWE
CWE-407
Inefficient Algorithmic Complexity
