PT-2026-29940 · Go · Github.Com/Traefik/Traefik+2

Publicado 2026-04-02 · Atualizado 2026-04-02

OSV

Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField in github.com/traefik/traefik

Identificadores relacionados

GO-2026-4893

Produtos afetados

Github.Com/Traefik/Traefik

Github.Com/Traefik/Traefik/V2

Github.Com/Traefik/Traefik/V3

Referências · 6

• https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c · Nota
• https://github.com/traefik/traefik/releases/tag/v3.6.11 · Nota
• https://github.com/traefik/traefik/releases/tag/v2.11.42 · Nota
• https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-33433 · Nota de Segurança
• https://osv.dev/vulnerability/GO-2026-4893 · Aviso do Fabricante