Skip to content
OpenAdvisories

Vendor

traefik

80 known vulnerabilities.

Products

traefik 80
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-88877 Public exploit

    Traefik v3.7.0 Authentication Bypass via from-to-www-redirect

    Traefik is a HTTP reverse proxy and load balancer. In versions >= v3.7.0 and <= v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotatio…

    traefik traefik
  • Critical 9.3
    CVE-2026-85595 Public exploit Scanner template

    Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth

    Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnerability in the digestAuth middleware where unknown usernames receive an empty secret instead of rejection. Attackers can compute a valid digest respons…

    traefik traefik traefik-3.6 Wolfi
  • Critical 9.8
    CVE-2024-45410 Public exploit

    HTTP client can remove the X-Forwarded headers in Traefik

    Traefik is a golang, Cloud Native Application Proxy. When a HTTP request is processed by Traefik, certain HTTP headers such as X-Forwarded-Host or X-Forwarded-Port are added by Traefik before the request is routed to the application. For a HTTP client, it sho…

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Alpine Go