Skip to content
OpenAdvisories

Package · Go

github.com/traefik/traefik/v2

68 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-71326

    Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing

    Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basic_auth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-…

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Go
  • Low 2.9
    CVE-2025-47952

    Traefik allows path traversal using url encoding

    Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to rout…

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Go
  • Low 3.5
    CVE-2022-23469

    Authorization header displayed in the debug logs

    Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are subject to a potential vulnerability in Traefik displaying the Authorization header in its debug logs. In certain cases, if the log level is set to DEBUG, credentials …

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Alpine Go