{"id":"GO-2024-2941","aliases":["GHSA-rvj4-q8q5-8grf"],"title":"ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik","summary":"ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik","severity":"none","vendor":"traefik","product":"github.com/traefik/traefik","ecosystem":"go","affected":["github.com/traefik/traefik","github.com/traefik/traefik/v2 < 2.11.5","github.com/traefik/traefik/v3 < 3.0.3"],"patched":["github.com/traefik/traefik/v2 2.11.5","github.com/traefik/traefik/v3 3.0.3"],"published":"2024-06-28","updated":"2026-08-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GO-2024-2941","references":[{"url":"https://github.com/traefik/traefik/security/advisories/GHSA-rvj4-q8q5-8grf"},{"url":"https://github.com/traefik/traefik/releases/tag/v2.11.5"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.0.3"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35255"}],"tags":["osv","go"],"ingestedAt":"2026-08-07T19:14:18.829Z","slug":"GO-2024-2941","body":"## Overview\n\nACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik\n\n## Affected packages\n\n- `github.com/traefik/traefik`\n- `github.com/traefik/traefik/v2 < 2.11.5`\n- `github.com/traefik/traefik/v3 < 3.0.3`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `github.com/traefik/traefik/v2 2.11.5`\n- `github.com/traefik/traefik/v3 3.0.3`","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}