Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

consulcatalog

package

Go to main page

Versions in this module

v1

v1.7.34

Dec 10, 2021 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.33

Oct 7, 2021 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.32

Oct 6, 2021 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.31

Oct 4, 2021 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.30

Apr 8, 2021 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.29

Mar 29, 2021 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.28

Jan 13, 2021 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.27

Jan 13, 2021 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.26

Jul 28, 2020 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.25

Jul 15, 2020 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.24

Mar 25, 2020 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.23

Mar 23, 2020 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.22

Mar 18, 2020 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.21

Feb 20, 2020 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.20

Dec 10, 2019 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.19

Oct 28, 2019 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.18

Sep 26, 2019 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.17

Sep 23, 2019 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.16

Sep 13, 2019 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.15

Sep 12, 2019 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.14

Aug 14, 2019 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.13

Aug 8, 2019 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

Changes in this version

type Provider

+ StrictChecks bool

v1.7.12

May 29, 2019 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.11

Apr 26, 2019 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.10

Mar 28, 2019 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.9

Feb 11, 2019 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.8

Jan 29, 2019 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.7

Jan 8, 2019 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.6

Dec 14, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.5

Dec 3, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.4

Oct 30, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.3

Oct 15, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.2

Oct 4, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.1

Sep 28, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.0

Sep 24, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1919: Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

Changes in this version

type Provider

+ Stale bool

+ func (p *Provider) Init(constraints types.Constraints) error

v1.7.0-rc5

Sep 18, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.0-rc4

Sep 7, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.0-rc3

Aug 1, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.0-rc2

Jul 17, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.7.0-rc1

Jul 9, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.6

Aug 20, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.5

Jul 10, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1950: Traefik Missing Authentication in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.4

Jun 15, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1950: Traefik Missing Authentication in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.3

Jun 5, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1950: Traefik Missing Authentication in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.2

May 22, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1950: Traefik Missing Authentication in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.1

May 14, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1950: Traefik Missing Authentication in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.0

Apr 30, 2018 GO-2022-0325 +15 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-1950: Traefik Missing Authentication in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

Changes in this version

+ const DefaultWatchWaitTime

+ type Provider struct

+ Domain string

+ Endpoint string

+ ExposedByDefault bool

+ FrontEndRule string

+ Prefix string

+ TLS *types.ClientTLS

+ func (p *Provider) Provide(configurationChan chan<- types.ConfigMessage, pool *safe.Pool, ...) error

+ type Service struct

+ Addresses []string

+ Name string

+ Nodes []string

+ Ports []int

+ Tags []string

v1.6.0-rc6

Apr 17, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.0-rc5

Apr 12, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.0-rc4

Apr 4, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.0-rc3

Mar 28, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.0-rc2

Mar 27, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

v1.6.0-rc1

Mar 26, 2018 GO-2022-0325 +14 more

GO-2022-0325: Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik

GO-2022-0808: Improper Certificate Handling in github.com/containous/traefik

GO-2022-0923: Header dropping in traefik in github.com/traefik/traefik

GO-2022-1152: Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik

GO-2022-1154: Traefik may display authorization header in the debug logs in github.com/traefik/traefik

GO-2023-2376: Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

GO-2023-2377: Traefik docker container using 100% CPU in github.com/traefik/traefik

GO-2023-2381: Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

GO-2024-2722: Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

GO-2024-2726: Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

GO-2024-2880: Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

GO-2024-2917: Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

GO-2024-2941: ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

GO-2024-2973: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik

GO-2024-3135: HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik