“httpoxy” CGI vulnerability response

A group of ASF projects (HTTP Server, Tomcat, Traffic Server, mod_perl) has analyzed the CGI application vulnerability recently published at https://httpoxy.org/

Their detailed analysis, targeted at Web server administrators and CGI developers and including mitigation information, can be found at https://www.apache.org/security/asf-httpoxy-response.txt

Related Articles

Wilmington, DE – January 12, 2026 – The Apache Software Foundation (ASF), the global home of open source software the world relies on, today...

By: Brian Proffitt, Vice President, Marketing & Publicity The Apache Software Foundation has come a long way since its founding in 1999, shepherding over...

Can you tell us a bit about the project?Apache Geode is an in-memory data grid that provides real-time, consistent access to data-intensive applications at...

Subscribe to ASF Plus One, Our Monthly Newsletter