logo

Database

Inadequate file size control In github.com/traefik/traefik

Description

Traefik has unbounded io.ReadAll on auth server response body that causes OOM DOS in github.com/traefik/traefik

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-269982. NVD-2026-269983. OSV-2026-269984. OSV-GO-2026-45935. GHSA-fw45-f5q2-2p4x6. GCVE-2026-269987. GHSA-fw45-f5q2-2p4x

References

1. https://github.com/traefik/traefik/security/advisories/GHSA-fw45-f5q2-2p4x2. https://github.com/traefik/traefik/releases/tag/v2.11.383. https://github.com/traefik/traefik/releases/tag/v3.6.9

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-IXY32 – Vulnerability | Fluid Attacks Database