Skip to content
OpenAdvisories

Package · Go

github.com/traefik/traefik/v3

61 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-71326

    Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing

    Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basic_auth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-…

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Go
  • Low 2.9
    CVE-2025-47952

    Traefik allows path traversal using url encoding

    Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to rout…

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Go