Skip to content
OpenAdvisories

Package · Wolfi

traefik-3.3

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.3
    CVE-2025-54799

    Lego does not enforce HTTPS

    Let's Encrypt client and ACME library written in Go (Lego). In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package (thus the lego library and the lego cli as well) don't enforce HTTPS when talking to CAs as an ACME client. Unlike the ht…

    go-acme lego sftpgo terraform-provider-acme Debian Ubuntu Wolfi Go
  • Low 3.3
    CVE-2025-54410

    Moby's Firewalld reload removes bridge network isolation

    Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld…

    moby moby katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi Go
  • Low 2.9
    CVE-2025-47952

    Traefik allows path traversal using url encoding

    Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to rout…

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Wolfi Go