---
id: GHSA-7jmw-8259-q9jx
aliases:
  - GO-2024-2917
title: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses
summary: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses
severity: medium
vendor: traefik
product: github.com/traefik/traefik/v3
ecosystem: go
affected:
  - 'github.com/traefik/traefik/v3 >= 3.0.0-beta3, < 3.0.2'
  - github.com/traefik/traefik/v2 < 2.11.4
  - github.com/traefik/traefik < 2.11.4
patched:
  - github.com/traefik/traefik/v3 3.0.2
  - github.com/traefik/traefik/v2 2.11.4
  - github.com/traefik/traefik 2.11.4
published: '2024-06-11'
updated: '2026-08-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-7jmw-8259-q9jx'
references:
  - url: 'https://github.com/traefik/traefik/security/advisories/GHSA-7jmw-8259-q9jx'
  - url: 'https://github.com/traefik/traefik'
  - url: 'https://github.com/traefik/traefik/releases/tag/v2.11.4'
  - url: 'https://github.com/traefik/traefik/releases/tag/v3.0.2'
  - url: 'https://pkg.go.dev/vuln/GO-2024-2917'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2024-24790'
tags:
  - osv
  - go
ingestedAt: '2026-08-07T19:14:16.141Z'
---

## Overview

### Impact

There is a vulnerability in [Go managing various Is methods (IsPrivate, IsLoopback, etc) for IPv4-mapped IPv6 addresses](https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ).

They didn't work as expected returning false for addresses which would return true in their traditional IPv4 forms.

### References

- [CVE-2024-24790](https://www.cve.org/CVERecord?id=CVE-2024-24790)

### Patches

- https://github.com/traefik/traefik/releases/tag/v2.11.4
- https://github.com/traefik/traefik/releases/tag/v3.0.2

### Workarounds

No workaround.

### For more information

If you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).

## Affected packages

- `github.com/traefik/traefik/v3 >= 3.0.0-beta3, < 3.0.2`
- `github.com/traefik/traefik/v2 < 2.11.4`
- `github.com/traefik/traefik < 2.11.4`

## Remediation

Upgrade to a patched release:

- `github.com/traefik/traefik/v3 3.0.2`
- `github.com/traefik/traefik/v2 2.11.4`
- `github.com/traefik/traefik 2.11.4`