TR
Product
traefik
81
CVEs
0
On KEV
10.0
Max CVSS
10
New 30D
Severity mix
Critical 18High 40Medium 19Low 4
Watch
Add traefik to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-71326 | 3.8 | Aug 6 | Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing Affected: >= 3.6.11, < 3.6.25; >= 3.7.0, < 3.7.10 |
| CVE-2026-114641 New | 3.7 | Oct 22 | Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper Affected: 2.11.0 before 2.11.58; 3.0.0 before 3.7.14 |
| CVE-2026-41263 | 3.7 | Apr 30 | Traefik: BasicAuth middleware: timing side-channel vulnerability Affected: < 2.11.43; >= 3.0.0-beta1, < 3.6.14; >= 3.7.0-ea.1, < 3.7.0-rc.2 |
| CVE-2026-32595 | 3.7 | Mar 20 | Traefik: BasicAuth Middleware Timing Attack Allows Username Enumeration Affected: < 2.11.41; >= 3.0.0-beta1, < 3.6.11; >= 3.7.0-ea.1, < 3.7.0-ea.2 |
Showing 4