Apache Apisix Dashboard — known CVE vulnerabilities

Every CVE whose affected-product data names Apache Apisix Dashboard, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-45232 — CVSS 9.8 (critical): In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework…
• CVE-2021-33190 — CVSS 5.3 (medium): In Apache APISIX Dashboard version 2.6, we changed the default value of listen host to 0.0.0.0 in order to facilitate users to configure…