Skip to content
OpenAdvisories

Package · Go

github.com/traefik/traefik

69 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.0
    CVE-2026-54761 Public exploit

    Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services

    Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.21 and 3.7.5, there is a high severity vulnerability in Traefik's Kubernetes Gateway provider affecting the crossProviderNamespaces allowlist. For HTTPRoute rules that declare multiple (WRR) bac…