CRITICAL9.8Go
GHSA-3f8r-4qwm-r7jf· CVE-2019-12405Improper Authentication in Apache Traffic Control
Modified: 11/8/2023
package
Go/github.com/apache/trafficcontrol
pkg:go/github.com/apache/trafficcontrol
HIGH7.5Go
GHSA-f2wr-c4c4-xjg7· CVE-2017-7670Apache Traffic Control vulnerable to Slowloris-style Denial of Service attack
Modified: 7/9/2025
MEDIUM4.3Go
GHSA-gw97-f6h8-gm94· CVE-2021-42009, GO-2022-0602Email relay in Apache Traffic Control
Modified: 8/21/2024
CRITICAL9.8Go
GHSA-mg2c-rc36-p594· CVE-2021-43350, GO-2024-2776Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection
Modified: 6/10/2024
MEDIUM5.8Go
GHSA-pw59-4qgf-jxr8· CVE-2020-17522Cache Manipulation Attack in Apache Traffic Control
Modified: 11/8/2023
HIGH7.5Go
GHSA-wp47-9r3h-xfgq· CVE-2022-23206, GO-2022-0585Server-Side Request Forgery in Apache Traffic Control
Modified: 8/21/2024
—Go
GO-2022-0585· CVE-2022-23206, GHSA-wp47-9r3h-xfgqServer-Side Request Forgery in Apache Traffic Control in github.com/apache/trafficcontrol
Modified: 3/3/2026
—Go
GO-2022-0602· CVE-2021-42009, GHSA-gw97-f6h8-gm94Email relay in Apache Traffic Control in github.com/apache/trafficcontrol
Modified: 3/3/2026
—Go
GO-2024-2776· CVE-2021-43350, GHSA-mg2c-rc36-p594Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection in github.com/apache/trafficcontrol
Modified: 3/3/2026
—Go
GO-2024-3358· CVE-2024-45387, GHSA-vq94-9pfv-ccqrSQL injection in Apache Traffic Control in github.com/apache/trafficcontrol
Modified: 3/3/2026
—Go
GO-2025-4033· CVE-2025-61581, GHSA-9m49-p2j3-c6xmApache Traffic Control has an Inefficient Regular Expression Complexity vulnerability in github.com/apache/trafficcontrol
Modified: 3/3/2026