15 matches found
CVE-2026-67309
Traefik 3.7.x (>=3.7.0 and
OPENSUSE-SU-2026:11403-1 traefik2-2.11.53-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.53-1.1 package on the GA media of openSUSE Tumbleweed...
traefik2-2.11.52-1.1 on GA media (moderate)
traefik2-2.11.52-1.1 on GA media Announcement ID: openSUSE-SU-2026:11243-1 Rating: moderate Cross-References: CVE-2026-54763 CVE-2026-54764 CVSS scores: CVE-2026-54763 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2026-54763 SUSE : 7.8...
OPENSUSE-SU-2026:11251-1 traefik-3.7.7-1.1 on GA media
These are all security issues fixed in the traefik-3.7.7-1.1 package on the GA media of openSUSE Tumbleweed...
Improper Handling of Case Sensitivity
Overview Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via the handling of HTTP headers in authentication middlewares. An attacker can impersonate users or escalate privileges by injecting underscore-variant headers that bypass canonical header strippin...
traefik2-2.11.50-1.1 on GA media (moderate)
traefik2-2.11.50-1.1 on GA media Announcement ID: openSUSE-SU-2026:11045-1 Rating: moderate Cross-References: CVE-2026-48020 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
traefik-3.6.17-1.1 on GA media (moderate)
traefik-3.6.17-1.1 on GA media Announcement ID: openSUSE-SU-2026:10810-1 Rating: moderate Cross-References: CVE-2026-44774 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the traefik-3.6.17-1....
PT-2026-38530
These are all security issues fixed in the traefik-3.6.16-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-37371
These are all security issues fixed in the traefik-3.6.15-1.1 package on the GA media of openSUSE Tumbleweed...
Improper TLS Certificate Verification
github.com/traefik/traefik/v3 is vulnerable to improper TLS certificate verification. The vulnerability is due to incorrect handling of the proxy-ssl-verify annotation, which disables TLS verification when enabled, allowing an attacker to perform man-in-the-middle attacks on HTTPS backends...
OPENSUSE-SU-2026:10314-1 traefik2-2.11.40-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.40-1.1 package on the GA media of openSUSE Tumbleweed...
traefik-3.6.8-1.1 on GA media (moderate)
traefik-3.6.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:10217-1 Rating: moderate Cross-References: CVE-2026-25949 CVSS scores: CVE-2026-25949 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25949 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...
OPENSUSE-SU-2026:10217-1 traefik-3.6.8-1.1 on GA media
These are all security issues fixed in the traefik-3.6.8-1.1 package on the GA media of openSUSE Tumbleweed...
