GHSA-7f4j-64p6-5h5v
Traefik affected by HTTP/2 CONTINUATION flood in net/http
There is a potential vulnerability in Traefik managing HTTP/2 connections.
More details in the CVE-2023-45288.
Patches
- https://github.com/traefik/traefik/releases/tag/v2.11.2
- https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5
Workarounds
No workaround
For more information
If you have any questions or comments about this advisory, please open an issue.
What each source reports
GitHub AdvisoriesNo score
Traefik affected by HTTP/2 CONTINUATION flood in net/http
There is a potential vulnerability in Traefik managing HTTP/2 connections.
More details in the CVE-2023-45288.
Patches
- https://github.com/traefik/traefik/releases/tag/v2.11.2
- https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5
Workarounds
No workaround
For more information
If you have any questions or comments about this advisory, please open an issue.
- Record
GHSA-7f4j-64p6-5h5v- Updated
- 2026-11-02
OSVNo score
Traefik affected by HTTP/2 CONTINUATION flood in net/http
There is a potential vulnerability in Traefik managing HTTP/2 connections.
More details in the CVE-2023-45288.
Patches
- https://github.com/traefik/traefik/releases/tag/v2.11.2
- https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5
Workarounds
No workaround
For more information
If you have any questions or comments about this advisory, please open an issue.
- Record
GHSA-7f4j-64p6-5h5v- Updated
- 2026-11-02
OSVGO-2024-2726No score
Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik
Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik
- Record
GO-2024-2726- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/traefik/traefik/v2Go | before 2.11.2 | 2.11.2 |
github.com/traefik/traefik/v3Go | 3.0.0-rc1 up to 3.0.0-rc5 | 3.0.0-rc5 |
github.com/traefik/traefikGo | All versions | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-7f4j-64p6-5h5v is a vulnerability with no CVSS score yet in github.com/traefik/traefik, published April 15, 2024. No source lists public exploit code. Fixed in github.com/traefik/traefik/v2 2.11.2.