CVE-2025-11230

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

Score

CVSS 3.1 7.5 High

Status

Analyzed - security@ubuntu.com

Published

2025-11-19

Last modified

2026-10-18

Weaknesses

CWE-407

Affected products

• Aloha Appliance (Haproxy)
• Haproxy (Haproxy)
• Haproxy Enterprise (Haproxy)
• Kubernetes Ingress Controller (Haproxy)
• Haproxy Community Edition (Haproxy Technologies)

References

• https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability