Security Advisories · traefik/traefik · GitHub

Security Advisories

View known security vulnerabilities and report new vulnerabilities privately to maintainers.

Report a vulnerability

Security Vulnerability: Go 1.23.x < 1.23.8 - HTTP Request Smuggling Vulnerability - 1.23.8
GHSA-5423-jcjm-2gpv published Apr 18, 2025 by emilevauge

Critical
Fix CVE-2025-22868
GHSA-3wqc-mwfx-672p published Apr 18, 2025 by emilevauge

High
Path Matchers Vulnerability
GHSA-6p68-w45g-48j7 published Apr 21, 2025 by emilevauge

High
Fix CVE-2024-53259
GHSA-hxr6-2p24-hf98 published Dec 17, 2024 by nmengin

Moderate
X-Forwarded-Prefix Header allows for Open Redirect
GHSA-h924-8g65-j9wg published Nov 29, 2024 by nmengin

Low
HTTP client can remove the X-Forwarded headers
GHSA-62c8-mh53-4cqv published Sep 19, 2024 by nmengin

Critical
Bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes
GHSA-gxrv-wf35-62w9 published Jul 4, 2024 by nmengin

High
ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability
GHSA-rvj4-q8q5-8grf published Jun 20, 2024 by nmengin

Moderate
Unexpected behavior with IPv4-mapped IPv6 addresses
GHSA-7jmw-8259-q9jx published Jun 11, 2024 by nmengin

Moderate
Malformed DNS message can cause infinite loop
GHSA-f7cq-5v43-8pwp published May 23, 2024 by nmengin

Moderate