logo

Database

OS Command Injection In github.com/traefik/traefik

Description

Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass in github.com/traefik/traefik

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-326952. NVD-2026-326953. OSV-2026-326954. OSV-GO-2026-48805. GHSA-67jx-r9pv-98rj6. GCVE-2026-326957. GHSA-67jx-r9pv-98rj

References

1. https://github.com/traefik/traefik/security/advisories/GHSA-67jx-r9pv-98rj2. https://github.com/traefik/traefik/commit/11d251415a6fd935025df5a9dda898e17e3097b23. https://github.com/traefik/traefik/releases/tag/v3.6.114. https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.