PT-2026-28482

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.42 Traefik versions prior to 3.6.12 Traefik versions prior to 3.7.0-ea.3 Description Traefik, an HTTP reverse proxy and load balancer, is susceptible to an identity impersonation issue. When the headerField...

CVE-2022-46153

Traefik is an open source HTTP reverse proxy and load balancer. In affected versions there is a potential vulnerability in Traefik managing TLS connections. A router configured with a not well-formatted TLSOption is exposed with an empty TLSOption. For instance, a route secured using an mTLS...

Header Injection

Traefik is vulnerable to Header Injection. The vulnerability is due to improper validation of the X-Forwarded-Prefix header, allowing it to be provided from an untrusted source...

GO-2024-3342 Traefik affected by CVE-2024-53259 in github.com/traefik/traefik

Traefik affected by CVE-2024-53259 in github.com/traefik/traefik...

GHSA-HXR6-2P24-HF98 Traefik affected by CVE-2024-53259

There is a potential vulnerability in Traefik managing HTTP/3 connections. More details in the CVE-2024-53259. Patches - https://github.com/traefik/traefik/releases/tag/v2.11.15 - https://github.com/traefik/traefik/releases/tag/v3.2.2 Workarounds No workaround For more information If you have any...

Traefik affected by CVE-2024-53259

There is a potential vulnerability in Traefik managing HTTP/3 connections. More details in the CVE-2024-53259. Patches - https://github.com/traefik/traefik/releases/tag/v2.11.15 - https://github.com/traefik/traefik/releases/tag/v3.2.2 Workarounds No workaround For more information If you have any...

OPENSUSE-SU-2024:14595-1 traefik2-2.11.16-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.16-1.1 package on the GA media of openSUSE Tumbleweed...

traefik-3.2.3-1.1 on GA media (moderate)

traefik-3.2.3-1.1 on GA media Announcement ID: openSUSE-SU-2024:14590-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

OPENSUSE-SU-2024:14590-1 traefik-3.2.3-1.1 on GA media

These are all security issues fixed in the traefik-3.2.3-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2024-52003

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...

GO-2024-3299 Traefik's X-Forwarded-Prefix Header still allows for Open Redirect in github.com/traefik/traefik

Traefik's X-Forwarded-Prefix Header still allows for Open Redirect in github.com/traefik/traefik...

GHSA-PX8V-PP82-RCVR vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, caddy-fips, eks-distro, k3s, coredns-fips, caddy, eks-distro-fips, kubernetes-dns-node-cache-fips, q, spegel, traefik, coredns, buf, traefik-fips, cloudflared, frp...

GHSA-PX8V-PP82-RCVR vulnerabilities

Vulnerabilities for packages: spegel, k3s, frp, kubernetes-dns-node-cache, cloudflared, buf, coredns, q, caddy...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, caddy-fips, eks-distro, k3s, coredns-fips, caddy, eks-distro-fips, kubernetes-dns-node-cache-fips, q, spegel, traefik, coredns, buf, traefik-fips, cloudflared, frp...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: spegel, k3s, frp, kubernetes-dns-node-cache, cloudflared, buf, coredns, q, caddy...

GHSA-H924-8G65-J9WG Traefik's X-Forwarded-Prefix Header still allows for Open Redirect

Impact There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. Patches - https://github.com/traefik/traefik/releases/tag/v2.11.14 - https://github.com/traefik/traefik/releases/tag/v3.2.1 Workarounds No workaround. For more...

GHSA-H924-8G65-J9WG vulnerabilities

Vulnerabilities for packages: traefik...

Traefik's X-Forwarded-Prefix Header still allows for Open Redirect

Impact There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. Patches - https://github.com/traefik/traefik/releases/tag/v2.11.14 - https://github.com/traefik/traefik/releases/tag/v3.2.1 Workarounds No workaround. For more...

CVE-2024-52003

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...

CVE-2024-52003

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...