{"id":"GO-2024-2917","aliases":["GHSA-7jmw-8259-q9jx"],"title":"Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik","summary":"Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik","severity":"none","vendor":"traefik","product":"github.com/traefik/traefik","ecosystem":"go","affected":["github.com/traefik/traefik","github.com/traefik/traefik/v2 < 2.11.4","github.com/traefik/traefik/v3 >= 3.0.0-beta3, < 3.0.2"],"patched":["github.com/traefik/traefik/v2 2.11.4","github.com/traefik/traefik/v3 3.0.2"],"published":"2024-06-14","updated":"2026-08-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GO-2024-2917","references":[{"url":"https://github.com/traefik/traefik/security/advisories/GHSA-7jmw-8259-q9jx"},{"url":"https://github.com/traefik/traefik/releases/tag/v2.11.4"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.0.2"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24790"}],"tags":["osv","go"],"ingestedAt":"2026-08-07T19:14:18.776Z","slug":"GO-2024-2917","body":"## Overview\n\nTraefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik\n\n## Affected packages\n\n- `github.com/traefik/traefik`\n- `github.com/traefik/traefik/v2 < 2.11.4`\n- `github.com/traefik/traefik/v3 >= 3.0.0-beta3, < 3.0.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `github.com/traefik/traefik/v2 2.11.4`\n- `github.com/traefik/traefik/v3 3.0.2`","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}