Resource exhaustion in Apache Software Foundation Traffic Server
CVE-2026-59173
Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.1.13, from 10.0.0 through 10.1.2. Users are recommended to upgrade to version 9.1.14 or 10.1.3, whic…
Vulnerability class: DoS (Denial of Service)
Affected products
- Apache Software Foundation Traffic Server — versions 9.0.0, 10.0.0
Weakness classification (CWE)
References
- security@apache.org (vendor-advisory)
- af854a3a-2127-422b-91ae-364da2661108