github.com/traefik/traefik/v3 vulnerabilities

CVEs whose affected-version data names the github.com/traefik/traefik/v3 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

github.com/traefik/traefik/v3 vulnerabilities

Traefik: ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false

Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port

Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware

Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth

Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass

Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails

Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services

Traefik has a StripPrefix Route-Level Auth Bypass via Path Normalization

Traefik's errors middleware forwards Authorization and Cookie headers to separate error page service

Traefik has an StripPrefixRegex Middleware Authorization Bypass via Path/RawPath Desync

Traefik: Deny Rule Bypass via Unauthenticated Malicious gRPC Requests in gRPC-Go Dependency (CVE-2026-33186)

Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass

Traefik Inverted TLS Verification Logic in ingress-nginx Provider

Traefik affected by Go oauth2/jws Improper Validation of Syntactic Correctness of Input vulnerability

ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability

Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

Traefik has unexpected behavior with IPv4-mapped IPv6 addresses

Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop

Traefik affected by HTTP/2 CONTINUATION flood in net/http

Traefik vulnerable to denial of service with Content-length header

Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass

Traefik vulnerable to potential DDoS via ACME HTTPChallenge

Traefik docker container using 100% CPU