logo

Database

Improper resource allocation In github.com/traefik/traefik

Description

Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall in github.com/traefik/traefik

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-220452. NVD-2026-220453. OSV-GO-2026-43224. OSV-2026-220455. GHSA-cwjm-3f7h-9hwq6. GCVE-2026-220457. GHSA-cwjm-3f7h-9hwq

References

1. https://github.com/traefik/traefik/commit/e9f3089e9045812bcf1b410a9d40568917b26c3d2. https://github.com/traefik/traefik/releases/tag/v2.11.353. https://github.com/traefik/traefik/releases/tag/v3.6.74. https://github.com/traefik/traefik/security/advisories/GHSA-cwjm-3f7h-9hwq

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.