Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2026/08/06 3:56 p.m.24 views

Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool

Summary There is a critical vulnerability in Traefik's default HTTP reverse proxy that leads to unauthenticated cross-user response poisoning. When a client opens an HTTP/2 or HTTP/3 CONNECT request, Traefik forwards it — body included — to an HTTP/1.1 upstream over a shared net/http.Transport. I...

9.1CVSS5.4AI score0.00505EPSS
SaveExploits0References11Affected Software3
OSV
OSV
added 2026/08/06 3:56 p.m.15 views

GHSA-3CCP-42PG-HGV6 Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool

Summary There is a critical vulnerability in Traefik's default HTTP reverse proxy that leads to unauthenticated cross-user response poisoning. When a client opens an HTTP/2 or HTTP/3 CONNECT request, Traefik forwards it — body included — to an HTTP/1.1 upstream over a shared net/http.Transport. I...

7CVSS5.4AI score0.00505EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
added 2026/08/06 3:56 p.m.19 views

CVE-2026-71324 Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.53, 3.6.24, and 3.7.9, Traefik's default HTTP reverse proxy forwards a plain HTTP/2 or HTTP/3 CONNECT request and its body to an HTTP/1.1 upstream through a shared net/http.Transport. When the upstream answers the CONNE...

7CVSS5.3AI score0.00505EPSS
SaveExploits0References10
OSV
OSV
added 2026/08/06 3:56 p.m.25 views

CVE-2026-71324 Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.53, 3.6.24, and 3.7.9, Traefik's default HTTP reverse proxy forwards a plain HTTP/2 or HTTP/3 CONNECT request and its body to an HTTP/1.1 upstream through a shared net/http.Transport. When the upstream answers the CONNE...

7CVSS5.4AI score
SaveExploits0References12
CVE
CVE
added 2026/08/06 3:56 p.m.98 views

CVE-2026-71324

Traefik , an open-source HTTP reverse proxy and load balancer, is vulnerable to cross-user response poisoning in its default proxy when forwarding HTTP/2 or HTTP/3 CONNECT requests to an HTTP/1.1 upstream via a shared net/http.Transport . If the upstream returns a keep-alive non-2xx response with...

9.1CVSS5.5AI score0.00505EPSS
SaveExploits0References10Affected Software1
EUVD
EUVD
added 2026/08/06 3:56 p.m.15 views

EUVD-2026-54288

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.53, 3.6.24, and 3.7.9, Traefik's default HTTP reverse proxy forwards a plain HTTP/2 or HTTP/3 CONNECT request and its body to an HTTP/1.1 upstream through a shared net/http.Transport. When the upstream answers the CONNE...

7CVSS5.5AI score0.00505EPSS
SaveExploits0References10
Rows per page
Query Builder