CVE-2026-22045 vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2026-26999 vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2025-66491 vulnerabilities

Vulnerabilities for packages: traefik-fips...

GHSA-92MV-8F8W-WQ52 vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2026-32305 vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2025-66490 vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-89P3-4642-CR2W vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2026-25949 vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-QR99-7898-VR7C vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

CVE-2026-33433 vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

GHSA-46WH-3698-F2CX vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: trivy, hydra-fips, zitadel, flux-kustomize-controller, scorecard, omni-fips, amazon-ssm-agent-fips, grpcurl, slsa-verifier, grype-db, envconsul-fips, seaweedfs-operator, knative-eventing-fips, terraform-provider-acme-fips, livekit-server, timestamp-authority-fips,...

GO-2026-4897 Traefik: Deny Rule Bypass via Unauthenticated Malicious gRPC Requests in gRPC-Go Dependency (CVE-2026-33186) in github.com/traefik/traefik

Traefik: Deny Rule Bypass via Unauthenticated Malicious gRPC Requests in gRPC-Go Dependency CVE-2026-33186 in github.com/traefik/traefik...

GO-2026-4893 Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField in github.com/traefik/traefik

Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField in github.com/traefik/traefik...

GO-2026-4880 Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass in github.com/traefik/traefik

Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass in github.com/traefik/traefik...

PT-2026-29940

Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField in github.com/traefik/traefik...

PT-2026-29932

Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass in github.com/traefik/traefik...

CVE-2026-34206

Captcha Protect is a Traefik middleware to add an anti-bot challenge to individual IPs in a subnet when traffic spikes are detected from that subnet. Prior to version 1.12.2, a reflected cross-site scripting XSS vulnerability exists in github.com/libops/captcha-protect. The challenge page accepte...

EUVD-2026-17602

Captcha Protect is a Traefik middleware to add an anti-bot challenge to individual IPs in a subnet when traffic spikes are detected from that subnet. Prior to version 1.12.2, a reflected cross-site scripting XSS vulnerability exists in github.com/libops/captcha-protect. The challenge page accepte...

CVE-2026-34206

Captcha Protect is a Traefik middleware to add an anti-bot challenge to individual IPs in a subnet when traffic spikes are detected from that subnet. Prior to version 1.12.2, a reflected cross-site scripting XSS vulnerability exists in github.com/libops/captcha-protect. The challenge page accepte...