PT-2026-36177

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.43 Traefik versions prior to 3.6.14 Traefik versions prior to 3.7.0-rc.2 Description An authentication bypass exists in the ForwardAuth middleware of Traefik, an HTTP reverse proxy and load balancer. This occurs...

PT-2026-36178

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.43 Traefik versions prior to 3.6.14 Traefik versions prior to 3.7.0-rc.2 Description An authentication bypass exists in the ForwardAuth and snippet-based authentication middleware. The forwarded-header sanitizati...

Improper TLS Certificate Verification

github.com/traefik/traefik/v3 is vulnerable to improper TLS certificate verification. The vulnerability is due to incorrect handling of the proxy-ssl-verify annotation, which disables TLS verification when enabled, allowing an attacker to perform man-in-the-middle attacks on HTTPS backends...

GHSA-QQX8-2XMM-JRV8 vulnerabilities

Vulnerabilities for packages: traefik, sftpgo...

CVE-2026-40611 vulnerabilities

Vulnerabilities for packages: traefik, sftpgo...

GHSA-QQX8-2XMM-JRV8 vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips, sftpgo...

CVE-2026-40611 vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips, sftpgo...

BIT-AUTHENTIK-2026-25748 authentik has a forward authentication bypass with broken cookie

authentik is an open-source identity provider. Prior to 2025.10.4 and 2025.12.4, with a malformed cookie it was possible to bypass authentication when using forward authentication in the authentik Proxy Provider when used in conjunction with Traefik or Caddy as reverse proxy. When a malicious...

PT-2026-36183

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.43 Traefik versions prior to 3.6.14 Traefik versions prior to 3.7.0-rc.2 Description An issue exists in the Kubernetes CRD provider cross-namespace isolation enforcement. When...

GHSA-GM3X-23WP-HC2C vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-8Q2W-WR49-WHQJ vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-XW98-5Q62-JX94 vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-CWJM-3F7H-9HWQ vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-92MV-8F8W-WQ52 vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-WVVQ-WGCR-9Q48 vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-7VWW-MVCR-X6VJ vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-FW45-F5Q2-2P4X vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2026-32595 vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2026-29054 vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2026-29777 vulnerabilities

Vulnerabilities for packages: traefik...