Unrated

Apache Traffic Server: Expect header field can unreasonably retain resource

CVE-2024-56202 First seen on SecPulse Mar 6, 2025

Fix status by distribution

Fixed packages published by each distribution for this CVE

Original description The description as published by the source.

Expected Behavior Violation vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3.

Users are recommended to upgrade to versions 9.2.9 or 10.0.4 or newer, which fixes the issue.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

NVD OSV