Known vulnerabilities in Traefik - page 2

Vendor: Containous
Software: Traefik
Software CPE: cpe:2.3:a:containous:traefik:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Traefik Traefik is affected by 63 known vulnerabilities: 13 high, 33 medium, 17 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129672 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-32695
CWE-74 Low
No
No
3.6.11 05.05.2026 SB2026050533
#VU129669 - Authentication Bypass by Primary Weakness
CVE-2026-32305
CWE-305 High
No
No
2.11.41, 3.6.11 05.05.2026 SB2026050533
#VU129668 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-29777
CWE-74 Low
No
No
3.6.10 05.05.2026 SB2026050532
#VU129667 - NULL Pointer Dereference
CVE-2026-27141
CWE-476 Medium
No
No
2.11.40, 3.6.10 05.05.2026 SB2026050532
SB2026052154
SB2026070811
#VU129666 - Improper Handling of Case Sensitivity
CVE-2026-29054
CWE-178 Medium
No
No
2.11.38, 3.6.9 05.05.2026 SB2026050531
#VU129665 - Resource exhaustion
CVE-2026-26999
CWE-400 Medium
No
No
2.11.38, 3.6.9 05.05.2026 SB2026050531
#VU129664 - Allocation of Resources Without Limits or Throttling
CVE-2026-26998
CWE-770 Low
No
No
2.11.38, 3.6.9 05.05.2026 SB2026050531
#VU129663 - Resource exhaustion
CVE-2026-22045
CWE-400 Medium
No
No
2.11.35, 3.6.7 05.05.2026 SB2026050530
#VU129662 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-54386
CWE-22 Low
No
No
2.11.28, 3.4.5, 3.5.0 05.05.2026 SB2026050529
#VU128730 - Improper Authorization
CVE-2026-33186
CWE-285 High
No
No
2.11.42, 3.6.12 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 68 more
#VU123131 - Allocation of Resources Without Limits or Throttling
CVE-2026-25949
CWE-770 Medium
No
No
3.6.8 23.02.2026 SB2026022333
#VU123129 - Improper Certificate Validation
CVE-2025-68121
CWE-295 High
No
No
2.11.37, 3.6.8 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 112 more
#VU119254 - Improper input validation
CVE-2025-66490
CWE-20 Medium
No
No
2.11.32, 3.6.3 08.12.2025 SB2025120814
#VU119253 - Improper Certificate Validation
CVE-2025-66491
CWE-295 Medium
No
No
3.6.3 08.12.2025 SB2025120814
#VU109917 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-47952
CWE-22 Medium
No
No
2.11.25, 3.4.1 29.05.2025 SB2025052961
#VU109916 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-32431
CWE-22 Low
No
No
2.11.25, 3.4.1 29.05.2025 SB2025052961
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871
CWE-444 Medium
No
No
2.11.24, 3.3.6 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU105461 - Resource exhaustion
CVE-2025-22868
CWE-400 Medium
No
No
2.11.24, 3.3.6 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU101816 - Insufficient Verification of Data Authenticity
CVE-2024-53259
CWE-345 Medium
No
No
2.11.15, 3.2.2 17.12.2024 SB2024121770
SB2024121771
SB2025012135
and 5 more
#VU101048 - Improper input validation
CVE-2024-52003
CWE-20 Low
No
No
2.11.14, 3.2.1 29.11.2024 SB2024112918


Showing elements 21 - 40 out of 63