CVE-2026-74848

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...

EUVD-2026-66958

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...

EUVD-2025-199389

Malicious code in @voiceflow/serverless-plugin-typescript npm...

MAL-2025-191373 Malicious code in @voiceflow/serverless-plugin-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250284d7c2e88d5fb38f55fabf16f35b8da97c4e888154f7f275f2bef975251 The package @voiceflow/serverless-plugin-typescript was found to contain malicious code. Source: google-open-source-security...

MAL-2025-41962 Malicious code in custom-serverless-plugin (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in custom-serverless-plugin (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in serverless-plugin-rds-trigger (npm)

The package serverless-plugin-rds-trigger was found to contain malicious code...

MAL-2025-33007 Malicious code in serverless-plugin-rds-trigger (npm)

The package serverless-plugin-rds-trigger was found to contain malicious code...