traefik2 vulnerabilities (openSUSE)
54 vulnerabilities.
-
traefik2openSUSE Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth 7.8 High -
traefik2openSUSE ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false 6.9 Medium -
traefik2openSUSE Traefik StripPrefix Route-Level Auth Bypass via Path Normalization 7.8 High -
traefik2openSUSE Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false 6.4 Medium -
traefik2openSUSE Traefik: Errors middleware forwards Authorization and Cookie headers to separate error page service 6.9 Medium -
traefik2openSUSE Traefik: BasicAuth middleware: timing side-channel vulnerability 6.3 Medium -
traefik2openSUSE Traefik Kubernetes CRD allows unauthorized cross-namespace middleware binding 4.8 Medium -
traefik2openSUSE Traefik: StripPrefixRegex auth bypass via Path/RawPath desync 7.8 High -
traefik2openSUSE Traefik: Forwarded alias spoofing top pre-auth decision bypass 7.8 High -
traefik2openSUSE Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth 7.8 High -
traefik2openSUSE Go JOSE affect by a panic in JWE decryption 7.5 High -
traefik2openSUSE Traefik: BasicAuth Middleware Timing Attack Allows Username Enumeration 6.3 Medium -
traefik2openSUSE Traefik mTLS bypass via fragmented ClientHello SNI extraction failure 7.8 High -
traefik2openSUSE gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
traefik2openSUSE Traefik: lowercase `Connection` tokens can delete traefik-managed forwarded identity headers (for example, `X-Real-Ip`) 7.5 High -
traefik2openSUSE Traefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS) 7.5 High -
traefik2openSUSE Traefik: unbounded io.ReadAll on auth server response body causes OOM denial of service(DOS) 4.4 Medium -
traefik2openSUSE Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall 5.9 Medium -
traefik2openSUSE Traefik doesn't Prevent Path Normalization Bypass in Router + Middleware Rules 6.9 Medium -
traefik2openSUSE Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
traefik2openSUSE traefik2-2.11.29-2.1 on GA media 8.5 High -
traefik2openSUSE Traefik's Client Plugin is Vulnerable to Path Traversal, Arbitrary File Overwrites and Remote Code Execution 7.3 High -
traefik2openSUSE Traefik allows path traversal using url encoding 2.9 Low -
traefik2openSUSE Traefik has a possible vulnerability with the path matchers 8.8 High -
traefik2openSUSE Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 6.5 Medium -
traefik2openSUSE Request smuggling due to acceptance of invalid chunked data in net/http 9.1 Critical -
traefik2openSUSE jwt-go allows excessive memory allocation during header parsing 7.5 High -
traefik2openSUSE Potential denial of service in golang.org/x/crypto 7.5 High -
traefik2openSUSE Unexpected memory consumption during token parsing in golang.org/x/oauth2 7.5 High -
traefik2openSUSE Go JOSE's Parsing Vulnerable to Denial of Service 6.6 Medium -
traefik2openSUSE Non-linear parsing of case-insensitive content in golang.org/x/net/html 5.3 Medium -
traefik2openSUSE Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical -
traefik2openSUSE Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 3.1 Low -
traefik2openSUSE HTTP client can remove the X-Forwarded headers in Traefik 9.8 Critical -
traefik2openSUSE Traefik vulnerable to bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes 7.5 High -
traefik2openSUSE go-retryablehttp can leak basic auth credentials to log files 6.0 Medium -
traefik2openSUSE Memory Exhaustion in braces 7.5 High -
traefik2openSUSE Malformed DNS message can cause infinite loop in net 5.9 Medium -
traefik2openSUSE Possible denial of service vulnerability with Content-length header in Traefik 7.5 High -
traefik2openSUSE HTTP/2 CONTINUATION flood in net/http 7.5 High -
traefik2openSUSE Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) 4.3 Medium -
traefik2openSUSE Uncontrolled Resource Consumption in Traefik 7.5 High -
traefik2openSUSE Incorrect processing of fragment in the URL leads to Authorization Bypass in Traefik 4.8 Medium -
traefik2openSUSE Denial of service whith ACME HTTPChallenge in Traefik 5.9 Medium -
traefik2openSUSE Incorrect detection of reserved device names on Windows in path/filepath 5.3 Medium -
traefik2openSUSE Insecure parsing of Windows paths with a \??\ prefix in path/filepath 7.5 High -
traefik2openSUSE HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
traefik2openSUSE HTTP header parsing could cause a deny of service 7.5 High -
traefik2openSUSE Excessive memory allocation in net/http and net/textproto 7.5 High -
traefik2openSUSE Panic on large handshake records in crypto/tls 7.5 High - Show olderLoading…