1206 matches found
CVE-2025-32431
CVE-2025-32431 : Traefik is vulnerable when using path-based matchers (PathPrefix, Path, PathRegex). If a request URL contains a trailing path traversal like /../ in the path, an attacker can bypass middleware routing and target a backend exposed via another router. This affects older releases pr...
Traefik 路径遍历漏洞
Traefik is an open source reverse proxy and load balancing tool from Traefik Open Source. Traefik suffers from a path traversal vulnerability that stems from the fact that when managing requests using a PathPrefix, Path, or PathRegex matcher, it is possible to bypass the middleware chain by using...
PT-2025-17448 · Traefik · Traefik
Name of the Vulnerable Software and Affected Versions: Traefik versions prior to 2.11.24 Traefik versions prior to 3.3.6 Traefik versions prior to 3.4.0-rc2 Description: The issue concerns Traefik, an HTTP reverse proxy and load balancer, where a potential vulnerability exists in managing request...
Traefik affected by Go HTTP Request Smuggling Vulnerability
Summary net/http: request smuggling through invalid chunked data: The net/http package accepts data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk...
GHSA-5423-JCJM-2GPV Traefik affected by Go HTTP Request Smuggling Vulnerability
Summary net/http: request smuggling through invalid chunked data: The net/http package accepts data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk...
Traefik affected by Go oauth2/jws Improper Validation of Syntactic Correctness of Input vulnerability
Summary We have encountered a security vulnerability being reported by our scanners for Traefik 2.11.22. - https://security.snyk.io/vuln/SNYK-CHAINGUARDLATEST-TRAEFIK33-9403297 Details It seems to target oauth2/jws library. PoC No steps to replicate this vulnerability Impact We have a strict...
GHSA-3WQC-MWFX-672P Traefik affected by Go oauth2/jws Improper Validation of Syntactic Correctness of Input vulnerability
Summary We have encountered a security vulnerability being reported by our scanners for Traefik 2.11.22. - https://security.snyk.io/vuln/SNYK-CHAINGUARDLATEST-TRAEFIK33-9403297 Details It seems to target oauth2/jws library. PoC No steps to replicate this vulnerability Impact We have a strict...
PT-2026-28482
Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.42 Traefik versions prior to 3.6.12 Traefik versions prior to 3.7.0-ea.3 Description Traefik, an HTTP reverse proxy and load balancer, is susceptible to an identity impersonation issue. When the headerField...
CVE-2022-46153
Traefik is an open source HTTP reverse proxy and load balancer. In affected versions there is a potential vulnerability in Traefik managing TLS connections. A router configured with a not well-formatted TLSOption is exposed with an empty TLSOption. For instance, a route secured using an mTLS...
Header Injection
Traefik is vulnerable to Header Injection. The vulnerability is due to improper validation of the X-Forwarded-Prefix header, allowing it to be provided from an untrusted source...
GO-2024-3342 Traefik affected by CVE-2024-53259 in github.com/traefik/traefik
Traefik affected by CVE-2024-53259 in github.com/traefik/traefik...
GHSA-HXR6-2P24-HF98 Traefik affected by CVE-2024-53259
There is a potential vulnerability in Traefik managing HTTP/3 connections. More details in the CVE-2024-53259. Patches - https://github.com/traefik/traefik/releases/tag/v2.11.15 - https://github.com/traefik/traefik/releases/tag/v3.2.2 Workarounds No workaround For more information If you have any...
Traefik affected by CVE-2024-53259
There is a potential vulnerability in Traefik managing HTTP/3 connections. More details in the CVE-2024-53259. Patches - https://github.com/traefik/traefik/releases/tag/v2.11.15 - https://github.com/traefik/traefik/releases/tag/v3.2.2 Workarounds No workaround For more information If you have any...
traefik-3.2.3-1.1 on GA media (moderate)
traefik-3.2.3-1.1 on GA media Announcement ID: openSUSE-SU-2024:14590-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...
OPENSUSE-SU-2024:14595-1 traefik2-2.11.16-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.16-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14590-1 traefik-3.2.3-1.1 on GA media
These are all security issues fixed in the traefik-3.2.3-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2024-52003
Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...
GO-2024-3299 Traefik's X-Forwarded-Prefix Header still allows for Open Redirect in github.com/traefik/traefik
Traefik's X-Forwarded-Prefix Header still allows for Open Redirect in github.com/traefik/traefik...
GHSA-PX8V-PP82-RCVR vulnerabilities
Vulnerabilities for packages: q, caddy, k3s, cloudflared, eks-distro-fips, eks-distro, traefik-fips, kubernetes-dns-node-cache-fips, spegel, frp, kubernetes-dns-node-cache, buf, caddy-fips, traefik...
