Ecosystem	Package	Version

Vulnerabilities

CVE-2025-11230

CVE-2025-11230

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

Published Nov 6, 2025

https://bugzilla.redhat.com/show_bug.cgi?id=2413003

CVSS ScoreHigh

7.5

Ecosystem	Package	Version


rpm	haproxy	1.3.26-1.el4
rpm	haproxy	1.3.26-1.el5
rpm	haproxy	1.4.22-3.el6
rpm	haproxy	1.4.24-2.el6
rpm	haproxy	1.5-0.3.dev22.el7
rpm	haproxy	1.5.14-3.el7
rpm	haproxy	1.5.18-1.el6
rpm	haproxy	1.5.18-3.el7
rpm	haproxy	1.5.18-3.el7_3.1
rpm	haproxy	1.5.18-6.el7
rpm	haproxy	1.5.18-7.el7
rpm	haproxy	1.5.18-8.el7
rpm	haproxy	1.5.18-9.el7
rpm	haproxy	1.5.18-9.el7_9.1
rpm	haproxy	1.5.2-2.el6
rpm	haproxy	1.5.2-2.el7_0
rpm	haproxy	1.5.2-3.el7_0
rpm	haproxy	1.5.4-2.el6
rpm	haproxy	1.5.4-2.el7
rpm	haproxy	1.5.4-3.el6
rpm	haproxy	1.5.4-4.el7_1.1
rpm	haproxy	1.5.4-4.el7_1
rpm	haproxy	1.8.15-5.el8
rpm	haproxy	1.8.15-6.el8_1.1
rpm	haproxy	1.8.23-3.el8
rpm	haproxy	1.8.23-5.el8
rpm	haproxy	1.8.27-2.el8
rpm	haproxy	1.8.27-4.el8
rpm	haproxy	1.8.27-5.el8
rpm	haproxy	1.8.27-5.el8_10.1
rpm	haproxy	2.4.17-3.el9
rpm	haproxy	2.4.17-3.el9_1.2
rpm	haproxy	2.4.17-4.el9
rpm	haproxy	2.4.17-6.el9
rpm	haproxy	2.4.22-1.el9
rpm	haproxy	2.4.22-3.el9_3
rpm	haproxy	2.4.22-3.el9_5.1
rpm	haproxy	2.4.7-2.el9_0
rpm	haproxy	2.8.14-1.el9_7.1
rpm	haproxy	3.0.3-1.el10
rpm	haproxy	3.0.5-4.el10

CVE-2025-11230 | Components Impacted | Sonatype Guide | Sonatype Guide