GO-2022-1154 Traefik may display authorization header in the debug logs in github.com/traefik/traefik

Traefik may display authorization header in the debug logs in github.com/traefik/traefik...

GO-2022-0923 Header dropping in traefik in github.com/traefik/traefik

Header dropping in traefik in github.com/traefik/traefik...

GO-2022-0808 Improper Certificate Handling in github.com/containous/traefik

Improper Certificate Handling in github.com/containous/traefik...

GO-2022-0774 Improper Authentication in github.com/containous/traefik

Improper Authentication in github.com/containous/traefik...

GO-2022-0325 Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik...

GO-2023-2377 Traefik docker container using 100% CPU in github.com/traefik/traefik

Traefik docker container using 100% CPU in github.com/traefik/traefik...

GO-2023-2381 Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik...

GO-2023-2376 Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik...

GO-2023-1950 Traefik Missing Authentication in github.com/traefik/traefik

Traefik Missing Authentication in github.com/traefik/traefik...

GO-2023-1919 Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

Containous Traefik Exposes Password Hashes in github.com/traefik/traefik...

OPENSUSE-SU-2024:14258-1 traefik2-2.11.8-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14257-1 traefik-3.1.2-1.1 on GA media

These are all security issues fixed in the traefik-3.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14182-1 traefik2-2.11.6-2.1 on GA media

These are all security issues fixed in the traefik2-2.11.6-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14181-1 traefik-3.0.4-2.1 on GA media

These are all security issues fixed in the traefik-3.0.4-2.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-2973 Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik...

SUSE CVE-2024-39321

Traefik is an HTTP reverse proxy and load balancer. Versions prior to 2.11.6, 3.0.4, and 3.1.0-rc3 have a vulnerability that allows bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes sent with spoofed IP addresses. Versions 2.11.6, 3.0.4, and 3.1.0-rc3 contain a patc...

Authorization Bypass

github.com/traefik/traefik is vulnerable to Authorization Bypass.The vulnerability is caused due to improper handling of HTTP/3 early data requests in QUIC 0-RTT handshakes sent with spoofed IP addresses, which allows an attacker to bypass IP allow-lists...

FreeBSD : traefik -- Bypassing IP allow-lists via HTTP/3 early data requests (767dfb2d-3c9e-11ef-a829-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 767dfb2d-3c9e-11ef-a829-5404a68ad561 advisory. The traefik authors report: There is a vulnerability in Traefik that allows bypassing IP allow-lists vi...

CVE-2024-39321

An authorization bypass vulnerability was found in Traefik. This flaw allows bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes sent with spoofed IP addresses. Mitigation Mitigation for this issue is either not available or the currently available options do not meet...

Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes

Impact There is a vulnerability in Traefik that allows bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes sent with spoofed IP addresses. Patches - https://github.com/traefik/traefik/releases/tag/v2.11.6 - https://github.com/traefik/traefik/releases/tag/v3.0.4 -...