Skip to content
OpenAdvisories

Package · Alpine

traefik

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2023-29013

    HTTP header parsing could cause a deny of service

    Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer for deploying microservices. There is a vulnerability in Go when parsing the HTTP headers, which impacts Traefik. HTTP header parsing could allocate substantially more memory than r…

    traefik traefik github.com/traefik/traefik/v2 traefik Alpine Go
  • High 7.5
    CVE-2023-24534

    Excessive memory allocation in net/http and net/textproto

    HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate…

    Go standard library net/textproto go stdlib Debian Ubuntu Alpine Go
  • High 8.1
    CVE-2022-46153

    Routes exposed with an empty TLSOption in traefik

    Traefik is an open source HTTP reverse proxy and load balancer. In affected versions there is a potential vulnerability in Traefik managing TLS connections. A router configured with a not well-formatted TLSOption is exposed with an empty TLSOption. For instan…

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Alpine Go