Apache APISIX — Vulnerabilities & Security Advisories 34

This page aggregates security vulnerabilities specifically affecting the open-source API gateway and microservice API management platform, Apache APISIX, focusing on weaknesses in its routing, authentication, and plugin systems. The collection compiles advisories released between 2022 and 2024, covering critical flaws such as remote code execution risks, denial of service conditions, and cross-site request forgery issues found in various versions. Readers can use this resource to track the vendor’s advisory history, analyze trends in a specific weakness class like input validation errors or deserialization bugs, and review the complete vulnerability lifecycle for the product. The data is structured to support both quick reference and deeper security analysis without including individual CVE identifiers in the summary view.