Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

traefik — Vulnerabilities & Security Advisories 81

All 81 CVE vulnerabilities found in traefik, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities identified in Traefik, the open-source reverse proxy and load balancer, specifically focusing on configuration weaknesses and access control flaws. The collection encompasses publicly disclosed issues ranging from early version releases to the most recent updates, covering a span of several years where critical bugs were reported and patched. Readers can utilize this resource to track the vendor's official security advisories, understand the characteristics of specific weakness classes affecting modern edge proxies, or look up the complete vulnerability history of the product to assess historical risk exposure. The data presented here serves as a centralized reference for security professionals and system administrators who need to evaluate the security posture of their infrastructure without navigating fragmented sources. By consolidating these records, the page facilitates efficient analysis of recurring patterns in the software's codebase and helps organizations prioritize remediation efforts based on the severity and impact of past incidents. This compilation ensures that stakeholders have immediate access to comprehensive information regarding known defects, enabling proactive defense strategies against potential exploitation of the reverse proxy components.

Vendor: traefik

CVE ID Title CVSS Severity Published
CVE-2026-25949 Traefik: TCP readTimeout bypass via STARTTLS on Postgres CWE-400 7.5 High 2026-02-12
CVE-2026-22045 Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall CWE-770 5.9 Medium 2026-01-15
CVE-2025-66491 Traefik has Inverted TLS Verification Logic in its ingress-nginx Provider CWE-295 5.9 Medium 2025-12-09
CVE-2025-66490 Traefik doesn't Prevent Path Normalization Bypass in Router + Middleware Rules CWE-436 9.8AI Critical AI 2025-12-09
CVE-2025-54386 Traefik's Client Plugin is Vulnerable to Path Traversal, Arbitrary File Overwrites and Remote Code Execution CWE-22 9.8 - 2025-08-01
CVE-2025-47952 Traefik allows path traversal using url encoding CWE-22 9.1AI Critical AI 2025-05-30
CVE-2025-32431 Traefik has a possible vulnerability with the path matchers CWE-22 5.9 - 2025-04-21
CVE-2024-52003 X-Forwarded-Prefix Header still allows for Open Redirect in traefik CWE-601 5.3 - 2024-11-29
CVE-2024-45410 HTTP client can remove the X-Forwarded headers in Traefik CWE-345 9.8 Critical 2024-09-19
CVE-2024-39321 Traefik vulnerable to bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes CWE-639 7.5 High 2024-07-05
CVE-2024-28869 Possible denial of service vulnerability with Content-length header in Traefik CWE-755 7.5 High 2024-04-12
CVE-2023-47633 Uncontrolled Resource Consumption in Traefik CWE-400 7.5 High 2023-12-04
CVE-2023-47106 Incorrect processing of fragment in the URL leads to Authorization Bypass in Traefik CWE-20 4.8 Medium 2023-12-04
CVE-2023-47124 Denial of service whith ACME HTTPChallenge in Traefik CWE-772 5.9 Medium 2023-12-04
CVE-2023-29013 HTTP header parsing could cause a deny of service CWE-400 7.5 High 2023-04-14
CVE-2022-46153 Routes exposed with an empty TLSOption in traefik CWE-295 8.1 High 2022-12-08
CVE-2022-23469 Authorization header displayed in the debug logs CWE-200 3.5 Low 2022-12-08
CVE-2022-39271 Traefik HTTP/2 connections management could cause a denial of service CWE-400 7.5 High 2022-10-11
CVE-2022-23632 Traefik skips the router TLS configuration when the host header is an FQDN CWE-295 7.4 High 2022-02-17
CVE-2021-32813 Drop Headers via Malicious Connection Header CWE-913 4.8 Medium 2021-08-03
CVE-2020-15129 Open redirect in Traefik CWE-601 6.1 Medium 2020-07-30

All 81 known CVE vulnerabilities affecting traefik with full Chinese analysis, references, and POCs where available.