Apache Traffic Server Integer Overflow or Wraparound Vulnerability - CVE-2026-58152
Apache Traffic Server mishandles integers while decoding HPACK/XPACK headers corrupting memory. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9 from 9.0.0 through 9.2.14 from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4 which fix the issue.