logo

Database

Spoofing In github.com/traefik/traefik

Description

Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField in github.com/traefik/traefik

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-334332. NVD-2026-334333. OSV-2026-334334. OSV-GO-2026-48935. GHSA-qr99-7898-vr7c6. GCVE-2026-334337. GHSA-qr99-7898-vr7c

References

1. https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c2. https://github.com/traefik/traefik/releases/tag/v2.11.423. https://github.com/traefik/traefik/releases/tag/v3.6.114. https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.