| Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerFieldCVE-2026-33433 · GHSA-QR99-7898-VR7CVersion ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
Go |
Medium
|
Fix reported |
|
| Traefik entrypoint header-name sanitization bypassed via request trailersCVE-2026-88004 · GHSA-V67P-PHPQ-FC8XVersion ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
GoRed Hat |
High
|
Fix reported |
|
| Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access loggingCVE-2026-88009 · GHSA-F52W-8J3H-J724Version ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
GoRed Hat |
High
|
Fix reported |
|
| Traefik HTTP/3 Backend NTLM Connection ReuseCVE-2026-88007 · GHSA-QQJF-53CJ-PWVVVersion ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
GoRed Hat |
Critical
|
Fix reported |
|
| Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect AuthorizationCVE-2026-88008 · GHSA-W4V4-9RW7-5326Version ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
GoRed Hat |
High
|
Fix reported |
|
| Traefik: ForwardAuth identity spoofing via dot-form header aliasCVE-2026-88011 · GHSA-RF44-J88R-HH8C |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
GoRed Hat |
Medium
|
Fix reported |
|
| Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unboundedCVE-2026-88012 · GHSA-7GHQ-V6JF-G56C |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
GoRed Hat |
Medium
|
Fix reported |
|
| Traefik has Knative Ingress Rule Injection that Allows Host Restriction BypassCVE-2026-32695 · GHSA-67JX-R9PV-98RJVersion ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
Go |
Medium
|
Fix reported |
|
| Traefik affected by Go oauth2/jws Improper Validation of Syntactic Correctness of Input vulnerabilityGHSA-3WQC-MWFX-672P |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
Go |
High
|
Fix reported |
|
| Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik servicesCVE-2026-54761 · GHSA-3G6V-2R68-PRFCVersion ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
GoRed Hat |
Medium
|
Fix reported |
|
| Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hostsCVE-2026-53622 · GHSA-9CR8-Q42Q-G8M7Version ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
Go |
High
|
Fix reported |
|
| Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution failsCVE-2026-54762 · GHSA-4MR2-FG2P-W63CVersion ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
GoRed Hat |
Medium
|
Fix reported |
|
| Traefik: kubernetes gateway rule injection via unescaped backticks in HTTPRoute match valuesCVE-2026-29777 · GHSA-8Q2W-WR49-WHQJVersion ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
GoRed Hat |
Medium
|
Fix reported |
|
| Traefik: Deny Rule Bypass via Unauthenticated Malicious gRPC Requests in gRPC-Go Dependency (CVE-2026-33186)GHSA-46WH-3698-F2CX · GO-2026-4897Version ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
Go |
High
|
Fix reported |
|
| Traefik: TCP readTimeout bypass via STARTTLS on PostgresCVE-2026-25949 · GHSA-89P3-4642-CR2WVersion ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
Go |
High
|
Fix reported |
|
| Traefik Inverted TLS Verification Logic in ingress-nginx ProviderCVE-2025-66491 · GHSA-7VWW-MVCR-X6VJVersion ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
GoRed Hat |
Medium
|
Fix reported |
|
| Traefik Client Plugin's Path Traversal Vulnerability Allows Arbitrary File Overwrite and Remote Code ExecutionCVE-2025-54386 · GHSA-Q6GG-9F92-R9WGVersion ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
Go |
High
|
Fix reported |
|
| Traefik's X-Forwarded-Prefix Header still allows for Open RedirectCVE-2024-52003 · GHSA-H924-8G65-J9WGVersion ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
Go |
Medium
|
Fix reported |
|
| Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakesCVE-2024-39321 · GHSA-GXRV-WF35-62W9Version ranges need review. |
github.com/traefik/traefik/v2github.com/traefik/traefik/v3 |
GoRed Hat |
High
|
Fix reported |
|
| Traefik HTTP header parsing could cause a denial of service CVE-2023-29013 · GHSA-7HJ9-RV74-5G92 |
github.com/traefik/traefik/v2 |
Go |
High
|
Fix reported |
|
