CVE-2026-31923

Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. This can occur due to sslverify in openid-connect plugin configuration being set to false by default. This issue affects Apache APISIX: from 0.7 through 3.15.0. Users are recommended to upgrade to version 3.16.0, whic...

CVE-2026-31923

creationtimestamp| type| source ---|---|--- 2026-04-14 03:25:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjggnw57f22e 2026-04-14 12:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhdk6ksra2a 2026-04-14 21:25:30+00:00| published-proof-of-concept|...