FreeBSD : traefik -- Multiple vulnerabilities (803b9816-77af-11f1-ba71-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 803b9816-77af-11f1-ba71-5404a68ad561 advisory. The traefik project releases a new version addressing multiple CVEs: Tenable has extracted the...

GHSA-3G6V-2R68-PRFC vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

CVE-2026-54761 vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

GHSA-9CR8-Q42Q-G8M7 vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

CVE-2026-53622 vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

traefik -- Multiple vulnerabilities

The traefik project releases a new version addressing multiple CVEs: CVE-2026-54763 underscore-variant identity spoofing CVE-2026-54764 ForwardAuth middleware leaks X-Forwarded-Port spoofing CVE-2026-54765 Gateway HTTPRoute backendRef filters can leak backend context...

GHSA-4MR2-FG2P-W63C vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

CVE-2026-54762 vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: telegraf, keda-fips, gitlab-rails-ce-fips, traefik, harbor, gitsign, etcd-fips, commercial-grafana, kyverno-fips, argo-events-fips, argo-cd, kubernetes, vault, grafana-fips, etcd, omnictl-multiarch, argo-events, harbor-fips, loki, argo-workflows, containerd,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: commercial-grafana, terraform, flux-source-controller, drone-fips, kubernetes, coder, etcd, frankenphp-8.3, flux, gitea, nemo, kyverno, gatekeeper, omnictl-multiarch-fips, opentofu, argo-workflows-fips, prometheus-elasticsearch-exporter, external-secrets-operator-fip...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: commercial-grafana, terraform, flux-source-controller, drone-fips, kubernetes, coder, etcd, frankenphp-8.3, flux, gitea, nemo, kyverno, gatekeeper, omnictl-multiarch-fips, opentofu, argo-workflows-fips, prometheus-elasticsearch-exporter, external-secrets-operator-fip...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: commercial-grafana, terraform, kubernetes, etcd, frankenphp-8.3, flux, nemo, kyverno, gatekeeper, omnictl-multiarch-fips, opentofu, argo-workflows-fips, prometheus-elasticsearch-exporter, external-secrets-operator-fips, mattermost, istio, helm,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: terraform-fips, commercial-grafana, terraform, kubernetes, etcd, frankenphp-8.3, flux, nemo, kyverno, gatekeeper, omnictl-multiarch-fips, opentofu, argo-workflows-fips, prometheus-elasticsearch-exporter, external-secrets-operator-fips, mattermost, istio, helm,...

GO-2026-5760 Traefik Kubernetes CRD allows unauthorized cross-namespace middleware binding in github.com/traefik/traefik

Traefik Kubernetes CRD allows unauthorized cross-namespace middleware binding in github.com/traefik/traefik...

GO-2026-5752 Traefik has a StripPrefix Route-Level Auth Bypass via Path Normalization in github.com/traefik/traefik

Traefik has a StripPrefix Route-Level Auth Bypass via Path Normalization in github.com/traefik/traefik...

CVE-2026-48020

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability exists in the StripPrefix middleware, allowing an unauthenticated attacker to bypass route-level authentication and authorization. By crafting a request path containing '..' or its percent-encoded form, an...

GO-2026-5277 Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false in github.com/traefik/traefik

Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false in github.com/traefik/traefik...

GO-2026-5195 Traefik: A timing side-channel vulnerability allows for valid username enumeration via BasicAuth middleware in github.com/traefik/traefik

Traefik: A timing side-channel vulnerability allows for valid username enumeration via BasicAuth middleware in github.com/traefik/traefik...

GO-2026-5180 Traefik has an StripPrefixRegex Middleware Authorization Bypass via Path/RawPath Desync in github.com/traefik/traefik

Traefik has an StripPrefixRegex Middleware Authorization Bypass via Path/RawPath Desync in github.com/traefik/traefik...

GO-2026-5083 Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services in github.com/traefik/traefik

Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services in github.com/traefik/traefik...