搜索结果
关于「traefik」的漏洞数据
| AVD编号 | 漏洞名称 | 漏洞类型 | 披露时间 | 漏洞状态 |
|---|---|---|---|---|
| AVD-2026-54765 | Traefik：网关 HTTPRoute backendRef 过滤器可以跨共享 Service:port 的路由泄漏后端上下文 (CVE-2026-54765) | 2026-07-07 | ||
| AVD-2026-54764 | 当 trustForwardHeader=false 时，ForwardAuth 中间件通过不受信任的 X-Forwarded-Proto 泄露 X-Forwarded-Port 欺骗 (CVE-2026-54764) | 2026-07-07 | ||
| AVD-2026-54763 | Traefik：BasicAuth / DigestAuth / ForwardAuth 中的 headerField 下划线变体身份欺骗 (CVE-2026-54763) | 2026-07-07 | ||
| AVD-2026-54762 | Traefik Kubernetes Ingress NGINX 认证失败开放漏洞(CVE-2026-54762) | 2026-06-24 | ||
| AVD-2026-54761 | Traefik Kubernetes Gateway 跨命名空间授权绕过漏洞(CVE-2026-54761) | 2026-06-24 | ||
| AVD-2026-53622 | Traefik HTTP/3 mTLS绕过漏洞(CVE-2026-53622) | 2026-06-24 | ||
| AVD-2026-48491 | Traefik SNICheck通配符TLSOptions绕过漏洞(CVE-2026-48491) | 2026-06-24 | ||
| AVD-2026-48020 | Traefik StripPrefix 路由级认证绕过漏洞(CVE-2026-48020) | 2026-06-24 | ||
| AVD-2023-54365 | Traefik - 通过 HTTP/2 请求处理拒绝服务 (CVE-2023-54365) | 2026-06-23 | ||
| AVD-2026-44774 | Traefik：网关 API TraefikService 后端接受rest@internal，尽管providers.rest.insecure = false，仍允许未经授权的暴露 REST 提供程序 (CVE-2026-44774) | 2026-05-16 | ||
| AVD-2026-41181 | Traefik：错误中间件将授权和 Cookie 标头转发到单独的错误页面服务 (CVE-2026-41181) | 2026-05-16 | ||
| AVD-2026-41263 | Traefik：BasicAuth 中间件：计时侧通道漏洞 (CVE-2026-41263) | 2026-05-01 | ||
| AVD-2026-41174 | Traefik Kubernetes CRD 允许未经授权的跨命名空间中间件绑定 (CVE-2026-41174) | 2026-05-01 | ||
| AVD-2026-40912 | Traefik：通过 Path/RawPath 异步绕过 StripPrefixRegex 身份验证 (CVE-2026-40912) | 2026-05-01 | ||
| AVD-2026-35051 | Traefik：ForwardAuth trustForwardHeader=false 允许欺骗性的 X-Forwarded-Prefix 绕过身份验证 (CVE-2026-35051) | 2026-05-01 | ||
| AVD-2026-39858 | Traefik：转发别名欺骗顶级预身份验证决策绕过 (CVE-2026-39858) | 2026-05-01 | ||
| AVD-2026-33433 | Traefik 非规范响应头注入漏洞(CVE-2026-33433) | 2026-03-27 | ||
| AVD-2026-32695 | Traefik Knative路由规则注入漏洞(CVE-2026-32695) | 2026-03-27 | ||
| AVD-2026-32595 | Traefik BasicAuth 计时攻击用户枚举漏洞(CVE-2026-32595) | 2026-03-20 | ||
| AVD-2026-32305 | Traefik mTLS 身份验证绕过漏洞(CVE-2026-32305) | 2026-03-20 | ||
| AVD-2026-29777 | Traefik < 3.6.10 HTTPRoute 规则注入漏洞(CVE-2026-29777) | 2026-03-12 | ||
| AVD-2026-29054 | Traefik 身份头部处理绕过漏洞(CVE-2026-29054) | 2026-03-06 | ||
| AVD-2026-26999 | Traefik TLS 握手拒绝服务漏洞(CVE-2026-26999) | 2026-03-06 | ||
| AVD-2026-26998 | Traefik ForwardAuth 内存溢出拒绝服务漏洞(CVE-2026-26998) | 2026-03-06 | ||
| AVD-2026-25949 | Traefik：在 Postgres 上通过 STARTTLS 绕过 TCP readTimeout (CVE-2026-25949) | 2026-02-13 | ||
| AVD-2026-22045 | Traefik 安全漏洞(CVE-2026-22045) | 2026-01-16 | ||
| AVD-2025-66491 | Traefik 在其 ingress-nginx 提供程序中具有反向 TLS 验证逻辑 (CVE-2025-66491) | 2025-12-09 | ||
| AVD-2025-66490 | Traefik 不会阻止路由器 + 中间件规则中的路径规范化绕过 (CVE-2025-66490) | 2025-12-09 | ||
| AVD-2025-54386 | Traefik的客户端插件容易受到路径遍历，任意文件覆盖和远程代码执行的影响（CVE-2025-54386） | 2025-08-02 | ||
| AVD-2025-47952 | Traefik允许使用URL编码（CVE-2025-47952）的路径遍历遍历 | 2025-05-30 |