1206 matches found
CVE-2024-29018 vulnerabilities
Vulnerabilities for packages: up, trivy, zot, ctop, melange, spire-server-fips, kubescape, loki, spire-server, kaniko, buildkitd, kargo, docker-compose, tkn, conftest, cadvisor, prometheus, conftest-fips, wolfictl, aactl, grype, syft, cilium-cli, buf, cadvisor-fips, ko, dagger, crossplane...
GHSA-MQ39-4GV4-MVPX vulnerabilities
Vulnerabilities for packages: up, trivy, zot, ctop, melange, spire-server-fips, kubescape, loki, spire-server, kaniko, buildkitd, kargo, docker-compose, tkn, conftest, cadvisor, prometheus, conftest-fips, wolfictl, aactl, grype, syft, cilium-cli, buf, cadvisor-fips, ko, dagger, crossplane...
PT-2024-3308 · Traefik +1 · Traefik +1
Name of the Vulnerable Software and Affected Versions: Traefik versions prior to 2.11.2 Traefik versions prior to 3.0.0-rc5 Description: The issue is related to insufficient handling of exceptional states when processing Content-Length headers, resulting in an indefinite hang with the default...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: aactl, grpc-health-probe, step, weaviate, zarf, caddy, rekor, cloudflared, terragrunt, guac, dgraph, vexctl, goreleaser, flux-source-controller, spire-server, wolfictl, melange, sigstore-scaffolding, kargo, falcoctl, temporal, cosign, tekton-chains, k3s, fulcio, rook...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: envoy-ratelimit, kine, crossplane-provider-aws-route53, terraform-provider-sendgrid-fips, vexctl, minio, kaniko, prometheus-beat-exporter-fips, hubble-fips, crossplane-provider-aws-s3, crossplane-provider-aws-cloudwatchlogs, nri-kubernetes, terragrunt,...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: up, trivy, bom, cri-tools, skopeo, kubeflow-katib, ctop, zot, k9s, argo-workflows-fips, cosign-fips, pulumi, kots, vexctl, kubescape, newrelic-infrastructure-agent, loki, k3d, helm-fips, eksctl, argo-workflows, buildkitd, kargo, guac, kpt, falcoctl-fips, chartmuseum,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: up, trivy, bom, cri-tools, skopeo, kubeflow-katib, ctop, zot, k9s, argo-workflows-fips, cosign-fips, pulumi, kots, vexctl, kubescape, newrelic-infrastructure-agent, loki, k3d, helm-fips, eksctl, argo-workflows, buildkitd, kargo, guac, kpt, falcoctl-fips, chartmuseum,...
CVE-2023-49295 vulnerabilities
Vulnerabilities for packages: caddy, frp...
CVE-2023-49295 vulnerabilities
Vulnerabilities for packages: frp, caddy...
GHSA-PPXX-5M9H-6VXF vulnerabilities
Vulnerabilities for packages: frp, caddy...
GHSA-PPXX-5M9H-6VXF vulnerabilities
Vulnerabilities for packages: caddy, frp...
SUSE CVE-2023-47124
Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers to achieve a slowloris attack. This...
SUSE CVE-2023-47106
Traefik is an open source HTTP reverse proxy and load balancer. When a request is sent to Traefik with a URL fragment, Traefik automatically URL encodes and forwards the fragment to the backend server. This violates RFC 7230 because in the origin-form the URL should only contain the absolute path...
SUSE CVE-2023-47633
Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. This issue has been addressed in versions...
GHSA-6FWG-JRFW-FF7P vulnerabilities
Vulnerabilities for packages: traefik...
Traefik docker container using 100% CPU
Summary The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. Details While attempting to set up Traefik to handle traffic for Docker containers, I observed in the...
GHSA-6FWG-JRFW-FF7P vulnerabilities
Vulnerabilities for packages: traefik...
GHSA-6FWG-JRFW-FF7P Traefik docker container using 100% CPU
Summary The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. Details While attempting to set up Traefik to handle traffic for Docker containers, I observed in the...
GHSA-8G85-WHQH-CR2F Traefik vulnerable to potential DDoS via ACME HTTPChallenge
Impact There is a potential vulnerability in Traefik managing the ACME HTTP challenge. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers slowloris attac...