---
id: GHSA-7f4j-64p6-5h5v
aliases:
  - GO-2024-2726
title: Traefik affected by HTTP/2 CONTINUATION flood in net/http
summary: Traefik affected by HTTP/2 CONTINUATION flood in net/http
severity: medium
vendor: traefik
product: github.com/traefik/traefik/v2
ecosystem: go
affected:
  - github.com/traefik/traefik/v2 < 2.11.2
  - 'github.com/traefik/traefik/v3 >= 3.0.0-rc1, < 3.0.0-rc5'
patched:
  - github.com/traefik/traefik/v2 2.11.2
  - github.com/traefik/traefik/v3 3.0.0-rc5
published: '2024-04-15'
updated: '2026-08-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-7f4j-64p6-5h5v'
references:
  - url: 'https://github.com/traefik/traefik/security/advisories/GHSA-7f4j-64p6-5h5v'
  - url: 'https://github.com/traefik/traefik'
  - url: 'https://github.com/traefik/traefik/releases/tag/v2.11.2'
  - url: 'https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5'
tags:
  - osv
  - go
ingestedAt: '2026-08-07T19:14:16.080Z'
---

## Overview

There is a potential vulnerability in Traefik managing HTTP/2 connections.

More details in the [CVE-2023-45288](https://www.cve.org/CVERecord?id=CVE-2023-45288).

## Patches

- https://github.com/traefik/traefik/releases/tag/v2.11.2
- https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5

## Workarounds

No workaround

## For more information

If you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).

## Affected packages

- `github.com/traefik/traefik/v2 < 2.11.2`
- `github.com/traefik/traefik/v3 >= 3.0.0-rc1, < 3.0.0-rc5`

## Remediation

Upgrade to a patched release:

- `github.com/traefik/traefik/v2 2.11.2`
- `github.com/traefik/traefik/v3 3.0.0-rc5`