See how haproxy technologies compares to other vendors in security performance
HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sampleconvregsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected.
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.
End of life: 4/1/2028, Latest version: 2.8.28
End of life: 4/1/2028, Latest version: 2.8.28
End of life: 4/1/2026, Latest version: 2.4.36
End of life: 4/1/2026, Latest version: 2.4.36
End of life: 3/21/2025, Latest version: 2.9.15
End of life: 3/21/2025, Latest version: 2.9.15
End of life: 4/5/2024, Latest version: 2.0.35
End of life: 4/5/2024, Latest version: 2.0.35
End of life: 10/1/2021, Latest version: 1.7.14
End of life: 10/1/2021, Latest version: 1.7.14
End of life: 7/27/2022, Latest version: 2.3.21
End of life: 7/27/2022, Latest version: 2.3.21
End of life: 7/31/2020, Latest version: 1.9.16
End of life: 7/31/2020, Latest version: 1.9.16
End of life: 4/23/2025, Latest version: 2.2.34
End of life: 4/23/2025, Latest version: 2.2.34
End of life: 4/5/2024, Latest version: 2.7.12
End of life: 4/5/2024, Latest version: 2.7.12
End of life: 4/1/2027, Latest version: 2.6.33
End of life: 4/1/2027, Latest version: 2.6.33
End of life: 12/9/2022, Latest version: 1.8.31
End of life: 12/9/2022, Latest version: 1.8.31
End of life: 5/2/2023, Latest version: 2.5.14
End of life: 5/2/2023, Latest version: 2.5.14
End of life: 3/18/2021, Latest version: 2.1.12
End of life: 3/18/2021, Latest version: 2.1.12
End of life: 4/1/2029, Latest version: 3.0.27