CVEvulnerability

CVE-2026-55233

7.5 HIGH Published 2026-07-10 Modified 2026-07-14 Official page ↗
Status
Analyzed
Published
2026-07-10
Last modified
2026-07-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-787

Description

OpenResty is a high performance web platform. From 1.29.2.1 to before 1.29.2.5, an out-of-bounds write vulnerability exists in the upstream PROXY protocol v2 implementation. When OpenResty is configured to send PROXY protocol version 2 headers to upstream servers, constructing the header in the stream proxy protocol v2 patch can write beyond the bounds of the allocated buffer, causing the worker process to crash and resulting in a denial of service. Only configurations that explicitly enable PROXY protocol v2 for upstream connections are impacted. This issue is fixed in version 1.29.2.5.

Affected configurations

• openresty openresty (>= 1.29.2.1 < 1.29.2.5)

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References