VulertSecurity VulertSecurity

Vulnerability Database · Search

github.com/traefik/traefik/v2 vulnerabilities — 34 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
5.3 medium CVE-2026-88011: Traefik Identity Spoofing via Dot-Form Header Alias github.com/traefik/traefik/v2 Go 10 Sep 2026 2.11.56
5.3 medium CVE-2026-88012: Traefik HTTP/3 Timeout Bypass Vulnerability github.com/traefik/traefik/v2 Go 10 Sep 2026 2.11.56
Unrated CVE-2026-48491: Traefik Wildcard TLSOptions Bypass Vulnerability github.com/traefik/traefik/v2 Go 11 Aug 2026 2.11.48
7.8 high CVE-2026-54763: Traefik Identity Spoofing Vulnerability in BasicAuth and ForwardAuth github.com/traefik/traefik/v2 Go 06 Aug 2026 2.11.51
9.1 critical CVE-2026-65600: Traefik Authentication Bypass via Path Traversal in ReplacePathRegex Middleware github.com/traefik/traefik/v2 Go 06 Aug 2026 2.11.52
4.8 medium CVE-2026-71325: Traefik Cross-Namespace Bypass Vulnerability in Kubernetes CRD Provider github.com/traefik/traefik/v2 Go 06 Aug 2026 2.11.54
5.8 medium CVE-2026-54764: Traefik ForwardAuth Middleware X-Forwarded-Port Spoofing Vulnerability github.com/traefik/traefik/v2 Go 06 Aug 2026 2.11.51
7.0 high CVE-2026-71324: Traefik Cross-User Response Poisoning Vulnerability github.com/traefik/traefik/v2 Go 06 Aug 2026 2.11.53
High Authentication Bypass Vulnerability in Traefik: Path Traversal in ReplacePathRegex Middleware github.com/traefik/traefik/v2 Go 22 Jul 2026 No fix published
7.8 high CVE-2026-48020: Traefik StripPrefix Route-Level Auth Bypass Vulnerability github.com/traefik/traefik/v2 Go 11 Jun 2026 2.11.48
6.9 medium CVE-2026-41181: Traefik Information Disclosure via Errors Middleware github.com/traefik/traefik/v2 Go 04 May 2026 2.11.44
7.8 high Unauthorized Access Vulnerability in Traefik via gRPC-Go Dependency github.com/traefik/traefik/v2 Go 29 Mar 2026 2.11.42
5.1 medium CVE-2026-33433: Traefik Vulnerable to Identity Spoofing via Non-Canonical Header Field github.com/traefik/traefik/v2 Go 27 Mar 2026 2.11.42
7.7 high Critical Panic Vulnerability in Traefik: HTTP/2 Frames Handling github.com/traefik/traefik/v2 Go 12 Mar 2026 2.11.40
7.5 high CVE-2026-29054: Traefik Vulnerability Allows Header Manipulation via Case-Insensitive Connection Tokens github.com/traefik/traefik/v2 Go 04 Mar 2026 2.11.38
7.5 high CVE-2026-26999: Traefik TCP Router TLS Handshake Stalling Vulnerability github.com/traefik/traefik/v2 Go 04 Mar 2026 2.11.38
4.4 medium CVE-2026-26998: Traefik Denial of Service Vulnerability Due to Unbounded Response Body Handling github.com/traefik/traefik/v2 Go 04 Mar 2026 2.11.38
7.3 high CVE-2025-54386: Traefik Client Plugin Path Traversal Vulnerability Leading to Arbitrary File Overwrite github.com/traefik/traefik/v2 Go 01 Aug 2025 2.11.28
9.1 critical Critical Go HTTP Request Smuggling Vulnerability in Traefik Package github.com/traefik/traefik/v2 Go 18 Apr 2025 2.11.24
Medium Moderate Vulnerability in Traefik: CVE-2024-53259 Affecting HTTP/3 Connections github.com/traefik/traefik/v2 Go 17 Dec 2024 2.11.15
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.