Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenResty is a high performance web platform. From 1.29.2.1 to before 1.29.2.5, an out-of-bounds write vulnerability exists in the upstream PROXY protocol v2 implementation. When OpenResty is configured to send PROXY protocol version 2 headers to upstream servers, constructing the header in the stream proxy protocol v2 patch can write beyond the bounds of the allocated buffer, causing the worker process to crash and resulting in a denial of service. Only configurations that explicitly enable PROXY protocol v2 for upstream connections are impacted. This issue is fixed in version 1.29.2.5.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-11 | 1 | Patch1 |
| 2026-07-15 | 1 | Disclosure1 |
🔴 OpenResty, Out-of-Bounds Write (CWE-787), #CVE-2026-55233 (HIGH) -DC-Jul2026-960 https://dailycve.com/openresty-out-of-bounds-write-cwe-787-cve-2026-55233-high-dc-jul2026-960/
Post summary
The statement announces the high‑severity CVE‑2026‑55233 for OpenResty, highlighting an out‑of‑bounds write vulnerability.
#CVE-2026-55233 - DoS via OOB write in #OpenResty PROXY protocol v2. CVSS 7.5. Workers crash when sending #PROXY headers. Update to 1.29.2.5 immediately. #CVEAlert #OpenResty #infosec #devops #devsecops #sysadmin #git #gitlab #docker #linux https://www.valtersit.com/cve/CVE-2026-55233/
Post summary
The message warns of a DoS vulnerability in OpenResty, provides technical details, and urges an immediate update to version 1.29.2.5 to mitigate the issue.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openresty | openresty | - | - | - |