Traefik Labs Traefik 3.0.0 Beta 4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:traefik:traefik:3.0.0:beta4:*:*:*:*:*:*

part: a version: 3.0.0 update: beta4

VendorTraefik (b040e15c-504b-5a80-9734-acb4a8f65c42)
ProductTraefik (78ce5f4f-6774-5086-a6e8-adb1ce31de4e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/traefik/traefik purl2cpe 2026-06-01 10:17:28.801943
pkg:rpm/opensuse/traefik purl2cpe 2026-06-01 10:17:28.801944
pkg:sourceforge/traefik.mirror purl2cpe 2026-06-01 10:17:28.801946

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28869 vulnerable 2026-06-08 06:33:27.774061 Possible denial of service vulnerability with Content-length header in Traefik
HIGH (7.5)
Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of service. This vulnerability has been addressed in version 2.11.2 and 3.0.0-rc5. Users are advised to upgrade. For affected versions, this vulnerability can be mitigated by configuring the readTimeout option.
Published: 2024-04-12T21:08:36.288Z
Updated: 2024-08-02T00:56:58.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47633 vulnerable 2026-06-08 06:14:25.273510 Uncontrolled Resource Consumption in Traefik
HIGH (7.5)
Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. This issue has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Published: 2023-12-04T20:36:19.000Z
Updated: 2024-11-27T16:03:02.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47124 vulnerable 2026-06-08 06:14:24.017285 Denial of service whith ACME HTTPChallenge in Traefik
MEDIUM (5.9)
Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the `HTTPChallenge` to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge (50 seconds) can be exploited by attackers to achieve a `slowloris attack`. This vulnerability has been patch in version 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. Users unable to upgrade should replace the `HTTPChallenge` with the `TLSChallenge` or the `DNSChallenge`.
Published: 2023-12-04T20:20:30.727Z
Updated: 2024-12-18T14:12:58.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47106 vulnerable 2026-06-08 06:14:23.953159 Incorrect processing of fragment in the URL leads to Authorization Bypass in Traefik
MEDIUM (4.8)
Traefik is an open source HTTP reverse proxy and load balancer. When a request is sent to Traefik with a URL fragment, Traefik automatically URL encodes and forwards the fragment to the backend server. This violates RFC 7230 because in the origin-form the URL should only contain the absolute path and the query. When this is combined with another frontend proxy like Nginx, it can be used to bypass frontend proxy URI-based access control restrictions. This vulnerability has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Published: 2023-12-04T20:26:36.710Z
Updated: 2024-08-02T21:01:22.591Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.