CVE-2026-31923

Apache APISIX versions 0.7 through 3.15.0 are vulnerable to a Cleartext Transmission of Sensitive Information vulnerability. The root cause is that the ssl_verify (or tls_verify) field in the openid-connect plugin configuration is set to false by default , potentially allowing sensitive data to b...

CVE-2026-31923

creationtimestamp| type| source ---|---|--- 2026-04-14 03:25:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjggnw57f22e 2026-04-14 12:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhdk6ksra2a 2026-04-14 21:25:30+00:00| published-proof-of-concept|...