CVE-2026-71326

creationtimestamp| type| source ---|---|--- 2026-08-06 18:35:20+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-6765-c87h-8mrf...

CVE-2026-71325

creationtimestamp| type| source ---|---|--- 2026-08-06 18:35:13+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-62fc-8686-hfmq...

CVE-2026-71324

creationtimestamp| type| source ---|---|--- 2026-08-06 16:31:29+00:00| seen| https://gist.github.com/alon710/44f5ca1944b401eb63cfb2fdd265ca45 2026-08-06 16:35:02+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-3ccp-42pg-hgv6...

CVE-2026-65601

creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:12+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj 2026-08-05 23:31:11+00:00| seen| https://gist.github.com/alon710/55629b813908ae24f1e292f2b3f6a8d5 2026-08-06 00:00:17+00:00...

CVE-2026-65602

creationtimestamp| type| source ---|---|--- 2026-08-05 22:32:39+00:00| seen| https://gist.github.com/alon710/8d9bdd08d5f9d0638cb7af9de6c94fc7 2026-08-05 22:35:09+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv 2026-08-06 00:00:18+00:00...

CVE-2026-54761

creationtimestamp| type| source ---|---|--- 2026-06-11 08:30:06+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-3g6v-2r68-prfc 2026-06-19 16:00:01+00:00| seen| https://bsky.app/profile/dbt3.ch/post/3monpld2twq2x 2026-07-13 22:00:22+00:00| seen|...

CVE-2026-53622

creationtimestamp| type| source ---|---|--- 2026-06-05 10:26:43+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-9cr8-q42q-g8m7...

Use of Incorrectly-Resolved Name or Reference

Overview Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference in StripPrefixRegex, when used together with ForwardAuth, BasicAuth, or DigestAuth. An attacker can gain unauthorized access to protected backend resources by sending requests with...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the ServeHTTP function, which does not sufficiently sanitize X- alias headers. An attacker can gain unauthenticated access to protected endpoints by injecting spoofed trust context with...

CVE-2023-47633

creationtimestamp| type| source ---|---|--- 2023-12-04 08:28:41+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-6fwg-jrfw-ff7p...