1206 matches found
Interpretation Conflict
Overview Affected versions of this package are vulnerable to Interpretation Conflict in path matching. An attacker can gain unauthorized access to restricted endpoints by sending requests with URL-encoded restricted characters in the path, which bypasses middleware and security controls...
Interpretation Conflict
Overview Affected versions of this package are vulnerable to Interpretation Conflict in path matching. An attacker can gain unauthorized access to restricted endpoints by sending requests with URL-encoded restricted characters in the path, which bypasses middleware and security controls...
Interpretation Conflict
Overview github.com/traefik/traefik/v2/pkg/server is a server package for traefik, a cloud native edge router. Affected versions of this package are vulnerable to Interpretation Conflict in path matching. An attacker can gain unauthorized access to restricted endpoints by sending requests with...
Interpretation Conflict
Overview Affected versions of this package are vulnerable to Interpretation Conflict in path matching. An attacker can gain unauthorized access to restricted endpoints by sending requests with URL-encoded restricted characters in the path, which bypasses middleware and security controls...
PT-2025-49684
Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.32 and 2.11.31 through 3.6.2 Description Traefik is an HTTP reverse proxy and load balancer. Requests using PathPrefix, Path, or PathRegex matchers can bypass path normalization. When Traefik uses path-based...
traefik -- Bypassing security controls via special characters
The traefik project reports: There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path; if the request path contains an encoded restricted...
traefik -- Inverted TLS Verification Logic in Kubernetes NGINX Provider
The traefik project reports: There is a potential vulnerability in Traefik NGINX provider managing the nginx.ingress.kubernetes.io/proxy-ssl-verify annotation. The provider inverts the semantics of the nginx.ingress.kubernetes.io/proxy-ssl-verify annotation. Setting the annotation to "on" intendi...
GHSA-7C64-F9JR-V9H2 vulnerabilities
Vulnerabilities for packages: azuredisk-csi-fips, consul, kratos, k8ssandra-operator, kubernetes-replicator, timestamp-authority-fips, sftpgo-plugin-eventstore, nri-discovery-kubernetes-fips, gitlab-cng, nginx-prometheus-exporter, nfs-subdir-external-provisioner, velero-plugin-for-csi-fips,...
EUVD-2021-2101
Malware in sbrugna...
EUVD-2021-1790
Malware in sbrugna...
EUVD-2021-2004
Malware in sbrugna...
EUVD-2021-14133
Malware in sbrugna...
EUVD-2022-1054
Malicious code in bioql PyPI...
EUVD-2024-3477
Malicious code in bioql PyPI...
EUVD-2023-3160
Malicious code in bioql PyPI...
EUVD-2025-16447
Malicious code in bioql PyPI...
EUVD-2023-1226
Malicious code in bioql PyPI...
EUVD-2022-1966
Malicious code in bioql PyPI...