1206 matches found
GO-2026-5676 vulnerabilities
Vulnerabilities for packages: teleport, k3s, kargo, kyverno-policy-reporter-ui, k8sgateway, jitsucom-bulker, kubernetes-dns-node-cache, q, kube-metrics-adapter, kyverno-policy-reporter, spegel, traefik, opentelemetry-operator, ipfs-cluster, kubo, frp, coredns, dkron...
GO-2025-4017 vulnerabilities
Vulnerabilities for packages: k3s, kargo, kyverno-policy-reporter-ui, k8sgateway, kubernetes-dns-node-cache, q, spegel, traefik, caddy, ipfs-cluster, kubo, frp, dkron...
GO-2026-5030 vulnerabilities
Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...
GO-2026-5028 vulnerabilities
Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...
GO-2025-4233 vulnerabilities
Vulnerabilities for packages: k3s, kargo, buf, k8sgateway, kubernetes-dns-node-cache, q, spegel, traefik, caddy, seaweedfs, ipfs-cluster, kubo, frp, dkron...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, buildah, dask-gateway, haproxy-ingress, rook, cert-exporter, ksops, cis-operator, flux, mountpoint-s3-csi-driver, pulumi-language-java, tetragon, argocd-image-updater, cri-tools, crossplane-provider-aws-firehose, crossplane-provider-aws-sns,...
GO-2026-4985 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, keda, tempo, tekton-pipelines, flux, terraform-mcp-server, knative-eventing, kots, hydra, buildkitd, ingress-nginx-controller, op-geth, argo-workflows, cerbos, kubescape, gitlab-kas, bento, kubescape-operator, kserve, dagger, ferretdb,...
GO-2026-5037 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, buildah, dask-gateway, haproxy-ingress, rook, cert-exporter, ksops, cis-operator, flux, mountpoint-s3-csi-driver, nri-postgresql, pulumi-language-java, tetragon, argocd-image-updater, cri-tools, crossplane-provider-aws-firehose,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: buildah, pulumi, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, ko, kots, rootlesskit, falcoctl, skaffold, src, rancher, pulumi-language-dotnet, crossplane-provider-aws-elasticache,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, kubernetes-dashboard-api, nri-f5, dask-gateway, tfsec, rancher-system-agent, verticadb-operator, cilium-cli, ksops, kubernetes-dashboard-metrics-scraper, nri-postgresql, yace, mountpoint-s3-csi-driver, tetragon, crossplane-provider-aws-firehose...
GO-2026-5287 Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts in github.com/traefik/traefik
Traefik's HTTP/3 TLS configuration selection is vulnerable to a bypass when using wildcard or mixed-case hosts in the SNI. The HTTP/3 QUIC path performed a direct, case-sensitive lookup on the SNI value to select the applicable TLS configuration. This lookup failed to match wildcard host patterns...
CVE-2026-71326
A flaw was found in Traefik. The BasicAuth middleware in Traefik reuses a key for concurrent password checks, which is generated by concatenating the password and secret without a delimiter. An attacker with a valid credential and the corresponding stored hash can exploit this vulnerability to...
CVE-2026-72735
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, writeTraefikConfigRemote in packages/server/src/utils/traefik/application.ts serializes user-controlled Traefik configuration with yaml.stringify and interpolates the resulting yamlStr into an echo command executed...
...[ More ]
A proof of concept exploit for an authorization bypass vulnerability in Traefik version 3.7.9. The vulnerability affects the Kubernetes Gateway API provider and results from ambiguous dynamic configuration object identifiers constructed by joining namespace and object names with hyphens. Differen...
CVE-2026-71325
Traefik is an open-source edge router that makes publishing services a fun and easy experience. Prior to 2.11.54, 3.6.25, and 3.7.10, cross-namespace @kubernetescrd references are not rejected for TraefikService backend references resolved by the service resolver. A tenant confined by RBAC to a...
CVE-2026-71326
Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basicauth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-free concatenation of password and...
CVE-2026-71324
Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.53, 3.6.24, and 3.7.9, Traefik's default HTTP reverse proxy forwards a plain HTTP/2 or HTTP/3 CONNECT request and its body to an HTTP/1.1 upstream through a shared net/http.Transport. When the upstream answers the CONNE...
CVE-2026-71327
Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute router and...
