搜索结果
关于「traefik」的漏洞数据
| AVD编号 | 漏洞名称 | 漏洞类型 | 披露时间 | 漏洞状态 |
|---|---|---|---|---|
| AVD-2026-88012 | Traefik HTTP/3 读超时缺失致资源耗尽(CVE-2026-88012) | 2026-09-11 | ||
| AVD-2026-88011 | Traefik 请求头身份伪造漏洞(CVE-2026-88011) | 2026-09-11 | ||
| AVD-2026-88009 | Traefik 不透明请求目标绕过漏洞(CVE-2026-88009) | 2026-09-11 | ||
| AVD-2026-88008 | Traefik：HTTP 请求的解释不一致（“HTTP 请求/响应走私”）和不正确的授权 (CVE-2026-88008) | 2026-09-10 | ||
| AVD-2026-88007 | Traefik HTTP/3 后端 NTLM 连接重用 (CVE-2026-88007) | 2026-09-10 | ||
| AVD-2026-88004 | 通过请求预告片绕过 Traefik 入口点标头名称清理 (CVE-2026-88004) | 2026-09-10 | ||
| AVD-2026-88879 | v2.11.56 之前的 Traefik 通过标头别名进行身份欺骗 (CVE-2026-88879) | 2026-09-10 | ||
| AVD-2026-88878 | Traefik v2.8.2 至 v3.6 HTTP/3 超时绕过 (CVE-2026-88878) | 2026-09-10 | ||
| AVD-2026-88877 | Traefik v3.7.0 通过 from-to-www-redirect 绕过身份验证 (CVE-2026-88877) | 2026-09-10 | ||
| AVD-2026-85597 | v2.11.55 之前的 Traefik 通过 TLS 选项冲突绕过 mTLS (CVE-2026-85597) | 2026-09-04 | ||
| AVD-2026-85596 | Traefik v3.7 通过 TLS 选项冲突绕过身份验证 (CVE-2026-85596) | 2026-09-04 | ||
| AVD-2026-85595 | v2.11.55 之前的 Traefik 通过digestAuth 绕过身份验证 (CVE-2026-85595) | 2026-09-04 | ||
| AVD-2026-85594 | Traefik v3.7.1 crossProviderNamespaces 通过服务中间件绕过 (CVE-2026-85594) | 2026-09-04 | ||
| AVD-2026-71325 | Traefik Kubernetes CRD provider 跨命名空间 TraefikService 引用导致 allowCrossNamespace 隔离绕过(CVE-2026-71325) | 2026-08-07 | ||
| AVD-2026-71324 | Traefik 默认反向代理共享后端连接池跨用户响应投毒漏洞(CVE-2026-71324) | 2026-08-07 | ||
| AVD-2026-71326 | Traefik BasicAuth 中间件 singleflight 键冲突导致身份伪造(CVE-2026-71326) | 2026-08-07 | ||
| AVD-2026-71327 | Traefik Kubernetes Gateway API provider 路由标识碰撞导致跨命名空间后端劫持(CVE-2026-71327) | 2026-08-07 | ||
| AVD-2026-67309 | Traefik v3.7.0 通过 RewriteTarget 身份验证绕过路径遍历 (CVE-2026-67309) | 2026-08-01 | ||
| AVD-2026-65600 | v2.11.52 之前的 Traefik 通过 ReplacePathRegex 绕过身份验证 (CVE-2026-65600) | 2026-07-22 | ||
| AVD-2026-65602 | 3.6.23 之前的 Traefik IngressRouteTCP ServersTransport 命名空间绕过 (CVE-2026-65602) | 2026-07-22 | ||
| AVD-2026-65601 | 3.7.7 之前的 Traefik 通过 HTTPRoute ExtensionRef 发生命名空间混乱 (CVE-2026-65601) | 2026-07-22 | ||
| AVD-2026-54765 | Traefik：网关 HTTPRoute backendRef 过滤器可以跨共享 Service:port 的路由泄漏后端上下文 (CVE-2026-54765) | 2026-07-07 | ||
| AVD-2026-54764 | 当 trustForwardHeader=false 时，ForwardAuth 中间件通过不受信任的 X-Forwarded-Proto 泄露 X-Forwarded-Port 欺骗 (CVE-2026-54764) | 2026-07-07 | ||
| AVD-2026-54763 | Traefik：BasicAuth / DigestAuth / ForwardAuth 中的 headerField 下划线变体身份欺骗 (CVE-2026-54763) | 2026-07-07 | ||
| AVD-2026-54762 | Traefik Kubernetes Ingress NGINX 认证失败开放漏洞(CVE-2026-54762) | 2026-06-24 | ||
| AVD-2026-54761 | Traefik Kubernetes Gateway 跨命名空间授权绕过漏洞(CVE-2026-54761) | 2026-06-24 | ||
| AVD-2026-48491 | Traefik SNICheck通配符TLSOptions绕过漏洞(CVE-2026-48491) | 2026-06-24 | ||
| AVD-2026-53622 | Traefik HTTP/3 mTLS绕过漏洞(CVE-2026-53622) | 2026-06-24 | ||
| AVD-2026-48020 | Traefik StripPrefix 路由级认证绕过漏洞(CVE-2026-48020) | 2026-06-24 | ||
| AVD-2023-54365 | Traefik - 通过 HTTP/2 请求处理拒绝服务 (CVE-2023-54365) | 2026-06-23 |