CVE-2025-11230: Denial of service vulnerability in HAProxy mjson library

Overview

Severity
High (CVSS 7.5)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U
Exploit Status
Not Exploited
Patch Tuesday
2025-Nov
Released
2025-11-21
Last Updated
2025-12-07
EPSS Score
0.41% (percentile: 61.4%)

Affected Products (4)

Other

  • 17219-17086
  • 19452-17084
  • 20705-17086
  • 20734-17084

Revision History

  • 2025-11-21: Information published.
  • 2025-11-22: Information published.
  • 2025-11-25: Information published.
  • 2025-12-06: Information published.
  • 2025-12-07: Information published.