See how haproxy technologies compares to other vendors in security performance
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected.
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.
End of life: 4/1/2031, Latest version: 3.4.4
End of life: 1/1/2027, Latest version: 3.3.14
End of life: 4/1/2030, Latest version: 3.2.23
HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sampleconvregsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.
End of life: 1/1/2026, Latest version: 3.1.17
End of life: 1/1/2026, Latest version: 3.1.17
End of life: 4/1/2028, Latest version: 2.8.28
End of life: 4/1/2028, Latest version: 2.8.28
End of life: 3/21/2025, Latest version: 2.9.15
End of life: 3/21/2025, Latest version: 2.9.15
End of life: 4/1/2029, Latest version: 3.0.27
End of life: 4/1/2029, Latest version: 3.0.27
End of life: 4/5/2024, Latest version: 2.7.12
End of life: 4/5/2024, Latest version: 2.7.12
End of life: 4/1/2027, Latest version: 2.6.33
End of life: 4/1/2027, Latest version: 2.6.33
End of life: 5/2/2023, Latest version: 2.5.14
End of life: 5/2/2023, Latest version: 2.5.14
End of life: 4/1/2026, Latest version: 2.4.36
End of life: 4/1/2026, Latest version: 2.4.36
End of life: 7/27/2022, Latest version: 2.3.21
End of life: 7/27/2022, Latest version: 2.3.21
End of life: 4/23/2025, Latest version: 2.2.34
End of life: 4/23/2025, Latest version: 2.2.34
End of life: 3/18/2021, Latest version: 2.1.12
End of life: 3/18/2021, Latest version: 2.1.12
End of life: 4/5/2024, Latest version: 2.0.35
End of life: 4/5/2024, Latest version: 2.0.35