Known vulnerabilities in Traefik - page 3

Vendor: Containous
Software: Traefik
Software CPE: cpe:2.3:a:containous:traefik:*:*:*:*:*:*:*:*
Total vulnerabilities: 74
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Traefik Traefik is affected by 74 known vulnerabilities: 17 high, 37 medium, 20 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128730 - Improper Authorization
CVE-2026-33186
CWE-285 High
No
No
2.11.42, 3.6.12 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 70 more
#VU123131 - Allocation of Resources Without Limits or Throttling
CVE-2026-25949
CWE-770 Medium
No
No
3.6.8 23.02.2026 SB2026022333
#VU123129 - Improper Certificate Validation
CVE-2025-68121
CWE-295 High
No
No
2.11.37, 3.6.8 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 118 more
#VU119254 - Improper input validation
CVE-2025-66490
CWE-20 Medium
No
No
2.11.32, 3.6.3 08.12.2025 SB2025120814
#VU119253 - Improper Certificate Validation
CVE-2025-66491
CWE-295 Medium
No
No
3.6.3 08.12.2025 SB2025120814
#VU109917 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-47952
CWE-22 Medium
No
No
2.11.25, 3.4.1 29.05.2025 SB2025052961
#VU109916 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-32431
CWE-22 Low
No
No
2.11.25, 3.4.1 29.05.2025 SB2025052961
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871
CWE-444 Medium
No
No
2.11.24, 3.3.6 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU105461 - Resource exhaustion
CVE-2025-22868
CWE-400 Medium
No
No
2.11.24, 3.3.6 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU101816 - Insufficient Verification of Data Authenticity
CVE-2024-53259
CWE-345 Medium
No
No
2.11.15, 3.2.2 17.12.2024 SB2024121770
SB2024121771
SB2025012135
and 5 more
#VU101048 - Improper input validation
CVE-2024-52003
CWE-20 Low
No
No
2.11.14, 3.2.1 29.11.2024 SB2024112918
#VU129661 - Insufficient Verification of Data Authenticity
CVE-2024-45410
CWE-345 High
No
No
2.11.9, 3.1.3 19.09.2024 SB2024091971
SB2026050538
#VU93811 - Security Features
CVE-2024-39321
CWE-254 Medium
No
No
2.11.6, 3.0.4 05.07.2024 SB2024070515
#VU91723 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-35255
CWE-362 Low
No
No
2.11.5, 3.0.3 11.06.2024 SB20240611248
SB2024091320
SB2024091965
and 15 more
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
2.11.4, 3.0.2 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU89295 - Untrusted Search Path
CVE-2024-24787
CWE-426 Medium
No
No
2.11.3, 3.0.1 09.05.2024 SB2024050936
SB2024050937
SB2024050938
and 12 more
#VU88546 - Improper input validation
CVE-2024-28869
CWE-20 Medium
No
No
2.11.2, 3.0.0 rc5 16.04.2024 SB2024041603
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Available
No
2.11.2 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU83639 - Resource exhaustion
CVE-2023-47633
CWE-400 Medium
No
No
2.10.6 04.12.2023 SB2023120410
#VU83638 - Improper Authorization
CVE-2023-47106
CWE-285 Medium
No
No
2.10.6 04.12.2023 SB2023120410


Showing elements 41 - 60 out of 74