Description
Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/traefik/traefik | >= 1.6.0, < 1.6.6 | 1.6.6 | GHSA-2cjc-rgmp-x649 |