Affected by GO-2022-0325 and 14 other vulnerabilities

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

The highest tagged major version is v3.

h2c

package

v1.7.0-rc2 Latest Latest Go to latest Published: Jul 17, 2018 License: MIT Imports: 16 Imported by: 6

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Package h2c implements the h2c part of HTTP/2.

The h2c protocol is the non-TLS secured version of HTTP/2 which is not available from net/http.

This section is empty.

This section is empty.

This section is empty.

type Server struct {
	*http.Server
}

Server implements net.Handler and enables h2c. Users who want h2c just need to provide an http.Server.

func (s Server) Serve(l net.Listener) error

Serve Put a middleware around the original handler to handle h2c