Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: traefik 3.7.15 Clear all filters
TI-2026-83076 CVE-2026-119574 · GHSA-r4c9-879g-3g2v

Data race in Traefik FastProxy enables unauthenticated denial of service

Priority LOW 35

Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attackers to crash the process by abusing HTTP/1 protocol upgrades.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00284 Published 2026-10-30 Fixed in 3.7.15 CWE-567
TI-2026-83075 CVE-2026-119573 · GHSA-mvh9-fv5r-qhpj

Authorization bypass in Traefik Kubernetes Ingress NGINX provider

Priority LOW 11

Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cross-namespace check on the auth-tls-secret annotation when a cached client authentication TLS option…

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00261 Published 2026-10-30 Fixed in 3.7.15 CWE-863
TI-2026-83074 CVE-2026-119572 · GHSA-432c-8xc8-xf66

Authentication bypass in Traefik Ingress NGINX provider disables mTLS

Priority LOW 30

Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX provider that silently disables mTLS configured via the auth-tls-secret annotation.

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00188 Published 2026-10-30 Fixed in 3.7.15 CWE-287