traefik vulnerabilities
Every vulnerability this feed holds for traefik, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
4 vulnerabilities tracked.
- 7.0 Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requests) through an…
- 7.0 Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthenticated with an…
- 7.0 Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS…
- 6.9 Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to skip…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that traefik is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Red Hat Google Microsoft Apple Linux Apache Software Foundation zephyrproject n/a Oracle Corporation Unknown Hewlett Packard Enterprise (HPE) Eclipse Foundation Tanium FreeRDP IBM Samsung Semiconductor Dell SuiteCRM MONGODB kyverno vercel vim Hitachi jpadilla