Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2023-10-10 · Partial fix · 1.28.0, 0.17.0 +9 CWE-400
Priority HIGH 72
Traefik is an open source HTTP reverse proxy and load balancer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01269 · Published 2023-12-04 · Fixed in 2.10.6, 3.0.0-beta5 CWE-400
Priority HIGH 70
Traefik is an HTTP reverse proxy and load balancer.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00439 · Published 2025-12-09 · Fixed in 2.11.32, 3.6.3 CWE-436
Priority MEDIUM 62
Traefik is an open source HTTP reverse proxy and load balancer.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01043 · Published 2022-12-08 · Fixed in 2.9.6 CWE-200
Priority MEDIUM 52
Traefik is a golang, Cloud Native Application Proxy.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01513 · Published 2024-09-19 · Fixed in 2.11.9, 3.1.3 CWE-345
Priority MEDIUM 49
Traefik is a HTTP reverse proxy and load balancer.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00649 · Published 2026-09-10 · No fix listed CWE-639
Priority MEDIUM 48
Traefik is an open source HTTP reverse proxy and load balancer.
CVSS 4.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.006 · Published 2026-09-10 · Fixed in 2.11.57, 3.7.13 CWE-287
Priority MEDIUM 48
Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00945 · Published 2025-04-21 · Fixed in 2.11.24, 3.3.6 +2 CWE-22
Priority MEDIUM 47
Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnerability in the digestAuth middleware where unknown usernames receive an empty secret instead of rejection.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.02451 · Published 2026-09-04 · Fixed in 2.11.55 CWE-287
Priority MEDIUM 44
Traefik is an open source HTTP reverse proxy and load balancer.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00443 · Published 2026-09-10 · Fixed in 2.11.57, 3.7.13 CWE-1286
Priority MEDIUM 44
Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard library's HTTP/2 implementation (CVE-2023-44487 / CVE-2023-39325, the 'Rapi…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00559 · Published 2026-06-23 · Fixed in 2.10.5, 3.0.0-beta4 CWE-400
Priority MEDIUM 42
Traefik is an HTTP reverse proxy and load balancer.
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00357 · Published 2026-06-23 · Fixed in 3.7.3, 2.11.48 CWE-288
Priority MEDIUM 42
Traefik is an HTTP reverse proxy and load balancer.
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00267 · Published 2026-04-30 · Fixed in 2.11.43, 3.6.14 +1 CWE-345
Priority MEDIUM 42
Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer that assists in deploying microservices.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0136 · Published 2022-10-11 · Fixed in 2.8.8, 2.9.0-rc5 CWE-400
Priority MEDIUM 41
Traefik versions >= v3.7.0 and <= v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware (generated from the nginx.ingress.kubernetes.io/rewrite-target annotatio…
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00659 · Published 2026-08-01 · Fixed in 3.7.8 CWE-22
Priority MEDIUM 41
Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathRegex middleware.
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00621 · Published 2026-07-22 · Fixed in 2.11.52, 3.6.23 +1 CWE-22
Priority MEDIUM 41
Traefik is an HTTP reverse proxy and load balancer.
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00629 · Published 2026-06-23 · Fixed in 3.7.3, 3.6.18 +1 CWE-288
Priority MEDIUM 41
Traefik is an HTTP reverse proxy and load balancer.
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00775 · Published 2026-06-23 · Fixed in 3.7.3, 3.6.19 +1 CWE-288
Priority MEDIUM 41
Traefik is an HTTP reverse proxy and load balancer.
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00767 · Published 2026-04-30 · Fixed in 2.11.43, 3.6.14 +1 CWE-706
Priority MEDIUM 41
Traefik is an HTTP reverse proxy and load balancer.
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00479 · Published 2026-04-30 · Fixed in 2.11.43, 3.6.14 +1 CWE-290
Priority MEDIUM 41
Traefik is an HTTP reverse proxy and load balancer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01046 · Published 2024-04-12 · Fixed in 2.11.2, 3.0.0-rc5 CWE-755
Priority MEDIUM 41
Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer for deploying microservices.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01085 · Published 2023-04-14 · Fixed in 2.9.10, 2.10.0-rc2 CWE-400
Priority MEDIUM 40
Traefik is an HTTP reverse proxy and load balancer.
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00239 · Published 2026-07-06 · Fixed in 2.11.51, 3.6.22 +1 CWE-178
Priority MEDIUM 40
Traefik is an HTTP reverse proxy and load balancer.
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.0042 · Published 2026-03-20 · Partial fix · 2.11.41, 3.6.11 +1 CWE-1188
Priority MEDIUM 40
Traefik is an HTTP reverse proxy and load balancer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00612 · Published 2026-03-05 · Fixed in 2.11.38, 3.6.9 CWE-400
Load more
THREATIST.IORead the docs