You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "smileby (via GitHub)" <gi...@apache.org> on 2026/07/23 09:21:03 UTC

[I] help request: Will APISIX be affected by the vulnerability CVE-2026-42533? [apisix]

smileby opened a new issue, #13734:
URL: https://github.com/apache/apisix/issues/13734

   ### Description
   
   APISIX is built upon Nginx, and most versions of Nginx are affected by this vulnerability. So, does APISIX need to be upgraded?
   
   ### Environment
   
   - APISIX version (run `apisix version`): 3.2.0、3.13.0
   - Operating system (run `uname -a`):
   - OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
   - etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
   - APISIX Dashboard version, if relevant:
   - Plugin runner version, for issues related to plugin runners:
   - LuaRocks version, for installation issues (run `luarocks --version`):
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] help request: Will APISIX be affected by the vulnerability CVE-2026-42533? [apisix]

Posted by "Th1990 (via GitHub)" <gi...@apache.org>.
Th1990 commented on issue #13734:
URL: https://github.com/apache/apisix/issues/13734#issuecomment-5117877104

   I would like to know this too.
   
   Seems `3.17.0` the latest Apisix version and its Docker image contains Nginx version which is listed as vulnerable: `nginx version: openresty/1.29.2.4`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] help request: Will APISIX be affected by the vulnerability CVE-2026-42533? [apisix]

Posted by "jamesmajor1688-tech (via GitHub)" <gi...@apache.org>.
jamesmajor1688-tech commented on issue #13734:
URL: https://github.com/apache/apisix/issues/13734#issuecomment-5150087903

   I've been wanting to replace my Nginx with Apisix, but when Nginx has a serious bug, instead of official upgrades and maintenance, I see them either ignoring it or dumping the problem on the developers, leaving them to maintain and upgrade it themselves. This is a huge challenge for developers. I have to admit Apisix is ​​an excellent product, but it really falls short in this aspect. This bug has been around for a long time and is still unresolved.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org