github.com/traefik/traefik vulnerabilities (Go)
71 vulnerabilities.
-
github.com/traefik/traefikGo Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle 6.3 Medium -
github.com/traefik/traefikGo Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging 8.8 High -
github.com/traefik/traefikGo Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization 7.0 High -
github.com/traefik/traefikGo Traefik HTTP/3 Backend NTLM Connection Reuse 9.1 Critical -
github.com/traefik/traefikGo Traefik entrypoint header-name sanitization bypassed via request trailers 7.0 High -
github.com/traefik/traefikGo Traefik: ForwardAuth identity spoofing via dot-form header alias 5.3 Medium -
github.com/traefik/traefikGo Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded 5.3 Medium -
github.com/traefik/traefikGo Traefik before v2.11.56 Identity Spoofing via Header Alias 5.3 Medium -
github.com/traefik/traefikGo Traefik v2.8.2 through v3.6 HTTP/3 Timeout Bypass 6.9 Medium -
github.com/traefik/traefikGo Traefik: Gateway API route identity collision allows cross-namespace backend hijacking 7.6 High -
github.com/traefik/traefikGo Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing 2.1 Low -
github.com/traefik/traefikGo Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef 4.8 Medium -
github.com/traefik/traefikGo Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool 7.0 High -
github.com/traefik/traefikGo Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass 7.8 High -
github.com/traefik/traefikGo Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass 5.3 Medium -
github.com/traefik/traefikGo Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef 5.3 Medium -
github.com/traefik/traefikGo Traefik before v2.11.52 Authentication Bypass via ReplacePathRegex 7.8 High -
github.com/traefik/traefikGo Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth 7.8 High -
github.com/traefik/traefikGo Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port 6.3 Medium -
github.com/traefik/traefikGo ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false 6.9 Medium -
github.com/traefik/traefikGo Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails 5.9 Medium -
github.com/traefik/traefikGo Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services 6.0 Medium -
github.com/traefik/traefikGo Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts 7.8 High -
github.com/traefik/traefikGo Traefik StripPrefix Route-Level Auth Bypass via Path Normalization 7.8 High -
github.com/traefik/traefikGo Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false 6.4 Medium -
github.com/traefik/traefikGo Traefik: Errors middleware forwards Authorization and Cookie headers to separate error page service 6.9 Medium -
github.com/traefik/traefikGo Traefik: BasicAuth middleware: timing side-channel vulnerability 6.3 Medium -
github.com/traefik/traefikGo Traefik Kubernetes CRD allows unauthorized cross-namespace middleware binding 4.8 Medium -
github.com/traefik/traefikGo Traefik: StripPrefixRegex auth bypass via Path/RawPath desync 7.8 High -
github.com/traefik/traefikGo Traefik: Forwarded alias spoofing top pre-auth decision bypass 7.8 High -
github.com/traefik/traefikGo Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth 7.8 High -
github.com/traefik/traefikGo Traefik: Deny Rule Bypass via Unauthenticated Malicious gRPC Requests in gRPC-Go Dependency (CVE-2026-33186) 7.8 High -
github.com/traefik/traefikGo Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField 5.1 Medium -
github.com/traefik/traefikGo Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass 6.3 Medium -
github.com/traefik/traefikGo Traefik: BasicAuth Middleware Timing Attack Allows Username Enumeration 6.3 Medium -
github.com/traefik/traefikGo Traefik mTLS bypass via fragmented ClientHello SNI extraction failure 7.8 High -
github.com/traefik/traefikGo Traefik: HTTP/2 frames can cause a running server to panic 7.7 High -
github.com/traefik/traefikGo Traefik has a kubernetes gateway rule injection via unescaped backticks in HTTPRoute match values 6.1 Medium -
github.com/traefik/traefikGo Traefik: lowercase `Connection` tokens can delete traefik-managed forwarded identity headers (for example, `X-Real-Ip`) 7.5 High -
github.com/traefik/traefikGo Traefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS) 7.5 High -
github.com/traefik/traefikGo Traefik: unbounded io.ReadAll on auth server response body causes OOM denial of service(DOS) 4.4 Medium -
github.com/traefik/traefikGo Traefik affected by TLS ClientAuth Bypass on HTTP/3 7.8 High -
github.com/traefik/traefikGo Traefik: TCP readTimeout bypass via STARTTLS on Postgres 7.5 High -
github.com/traefik/traefikGo Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall 5.9 Medium -
github.com/traefik/traefikGo Traefik has Inverted TLS Verification Logic in its ingress-nginx Provider 5.9 Medium -
github.com/traefik/traefikGo Traefik doesn't Prevent Path Normalization Bypass in Router + Middleware Rules 6.9 Medium -
github.com/traefik/traefikGo Traefik's Client Plugin is Vulnerable to Path Traversal, Arbitrary File Overwrites and Remote Code Execution 7.3 High -
github.com/traefik/traefikGo Traefik allows path traversal using url encoding 2.9 Low -
github.com/traefik/traefikGo Traefik has a possible vulnerability with the path matchers 8.8 High -
github.com/traefik/traefikGo Traefik affected by Go HTTP Request Smuggling Vulnerability 9.1 Critical - Show olderLoading…