traefik vulnerabilities (openSUSE)
75 vulnerabilities.
traefikopenSUSENon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 MediumtraefikopenSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 CriticaltraefikopenSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 LowtraefikopenSUSEHTTP client can remove the X-Forwarded headers in Traefik9.8 CriticaltraefikopenSUSETraefik vulnerable to bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes7.5 HightraefikopenSUSEgo-retryablehttp can leak basic auth credentials to log files6.0 MediumtraefikopenSUSEKKProgressbar2 Free <= 1.1.4.2 - Admin+ SQL Injection6.5 MediumtraefikopenSUSEMemory Exhaustion in braces7.5 HightraefikopenSUSEMalformed DNS message can cause infinite loop in net5.9 MediumtraefikopenSUSEPossible denial of service vulnerability with Content-length header in Traefik7.5 HightraefikopenSUSEHTTP/2 CONTINUATION flood in net/http7.5 HightraefikopenSUSEGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumtraefikopenSUSEUncontrolled Resource Consumption in Traefik7.5 HightraefikopenSUSEIncorrect processing of fragment in the URL leads to Authorization Bypass in Traefik4.8 MediumtraefikopenSUSEDenial of service whith ACME HTTPChallenge in Traefik5.9 MediumtraefikopenSUSEIncorrect detection of reserved device names on Windows in path/filepath5.3 MediumtraefikopenSUSEInsecure parsing of Windows paths with a \??\ prefix in path/filepath7.5 HightraefikopenSUSEHTTP/2 rapid reset can cause excessive work in net/http7.5 HightraefikopenSUSEHTTP header parsing could cause a deny of service7.5 HightraefikopenSUSEExcessive memory allocation in net/http and net/textproto7.5 HightraefikopenSUSEPanic on large handshake records in crypto/tls7.5 HightraefikopenSUSEExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumtraefikopenSUSEAuthorization header displayed in the debug logs3.5 LowtraefikopenSUSERoutes exposed with an empty TLSOption in traefik8.1 HightraefikopenSUSEgopkg.in/yaml.v3 Denial of Service7.5 High