PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/traefik/traefik/v2 Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField High Risk 8.8 7 months ago 9 hours ago
github.com/traefik/traefik/v2 Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging High Risk 8.0 1 month ago 1 month ago
github.com/traefik/traefik/v2 Traefik HTTP/3 Backend NTLM Connection Reuse Critical 9.5 1 month ago 1 month ago
github.com/traefik/traefik/v2 Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded Medium Risk 5.3 1 month ago 1 month ago
github.com/traefik/traefik/v2 Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded in github.com/traefik/traefik Unknown 1 month ago 1 month ago
github.com/traefik/traefik/v2 Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization High Risk 8.0 1 month ago 1 month ago
github.com/traefik/traefik/v2 Traefik: ForwardAuth identity spoofing via dot-form header alias Medium Risk 6.0 1 month ago 1 month ago
github.com/traefik/traefik/v2 Traefik: ForwardAuth identity spoofing via dot-form header alias in github.com/traefik/traefik Unknown 1 month ago 1 month ago
github.com/traefik/traefik/v2 Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging in github.com/traefik/traefik Unknown 1 month ago 1 month ago
github.com/traefik/traefik/v2 Traefik HTTP/3 Backend NTLM Connection Reuse in github.com/traefik/traefik Unknown 1 month ago 1 month ago
github.com/traefik/traefik/v2 Traefik entrypoint header-name sanitization bypassed via request trailers in github.com/traefik/traefik Unknown 1 month ago 1 month ago
github.com/traefik/traefik/v2 Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization in github.com/traefik/traefik Unknown 1 month ago 1 month ago
github.com/traefik/traefik/v2 Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass Medium Risk 6.0 7 months ago 1 month ago
github.com/traefik/traefik/v2 Traefik affected by Go oauth2/jws Improper Validation of Syntactic Correctness of Input vulnerability High Risk 7.5 1 year ago 1 month ago
github.com/traefik/traefik/v2 Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services High Risk 7.1 4 months ago 1 month ago
github.com/traefik/traefik/v2 Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts Critical 10.0 4 months ago 1 month ago
github.com/traefik/traefik/v2 Traefik: kubernetes gateway rule injection via unescaped backticks in HTTPRoute match values Medium Risk 6.0 7 months ago 1 month ago
github.com/traefik/traefik/v2 Traefik: Deny Rule Bypass via Unauthenticated Malicious gRPC Requests in gRPC-Go Dependency (CVE-2026-33186) High Risk 8.0 7 months ago 1 month ago
github.com/traefik/traefik/v2 Traefik Client Plugin's Path Traversal Vulnerability Allows Arbitrary File Overwrite and Remote Code Execution High Risk 8.0 1 year ago 1 month ago
github.com/traefik/traefik/v2 Traefik's X-Forwarded-Prefix Header still allows for Open Redirect Medium Risk 6.0 1 year ago 1 month ago
github.com/traefik/traefik/v2 Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes High Risk 7.5 2 years ago 1 month ago
github.com/traefik/traefik/v2 Traefik HTTP header parsing could cause a denial of service High Risk 7.5 3 years ago 1 month ago
github.com/traefik/traefik/v2 Traefik has a StripPrefix Route-Level Auth Bypass via Path Normalization Critical 10.0 4 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass Critical 10.0 4 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef Medium Risk 6.0 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth High Risk 8.0 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false Medium Risk 5.8 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool High Risk 8.0 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware Critical 9.1 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: Gateway API route identity collision allows cross-namespace backend hijacking in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik's errors middleware forwards Authorization and Cookie headers to separate error page service Medium Risk 6.0 6 months ago 2 months ago
github.com/traefik/traefik/v2 Authorization and Cookie headers forwarded to error page service in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 Traefik: SNICheck ignores wildcard TLSOptions mappings in github.com/traefik/traefik Unknown 2 months ago 2 months ago
github.com/traefik/traefik/v2 ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability Medium Risk 5.5 2 years ago 2 months ago
github.com/traefik/traefik/v2 Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik Unknown 2 years ago 2 months ago
github.com/traefik/traefik/v2 Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik Unknown 2 years ago 2 months ago
github.com/traefik/traefik/v2 Traefik affected by HTTP/2 CONTINUATION flood in net/http Medium Risk 6.0 2 years ago 2 months ago
github.com/traefik/traefik/v2 Traefik may display authorization header in the debug logs in github.com/traefik/traefik Unknown 2 years ago 2 months ago
github.com/traefik/traefik/v2 Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik Unknown 2 years ago 2 months ago
github.com/traefik/traefik/v2 Traefik routes exposed with an empty TLSOption Medium Risk 6.5 3 years ago 2 months ago
Data courtesy of OSV.dev
Page 1