PT-2026-29932 · Go · Github.Com/Traefik/Traefik+2

Published 2026-04-02 · Updated 2026-04-02

OSV

Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass in github.com/traefik/traefik

Related Identifiers

GO-2026-4880

Affected Products

Github.Com/Traefik/Traefik

Github.Com/Traefik/Traefik/V2

Github.Com/Traefik/Traefik/V3

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-32695 · Security Note
• https://osv.dev/vulnerability/GO-2026-4880 · Vendor Advisory
• https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2 · Note
• https://github.com/traefik/traefik/releases/tag/v3.6.11 · Note
• https://github.com/traefik/traefik/security/advisories/GHSA-67jx-r9pv-98rj · Note
• https://github.com/traefik/traefik/commit/11d251415a6fd935025df5a9dda898e17e3097b2 · Note