Skip to content
OpenAdvisories

Package · Wolfi

traefik-3.6

71 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.7

    Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper

    Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend authentication, where the per-connection sticky round tripper slot is read and written without synchronization. Remote attackers can send co…

  • Low 2.0

    OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, expo…