logo

Database

Asymmetric denial of service - ReDoS In github.com/traefik/traefik/v2

Description

Traefik: TCP readTimeout bypass via STARTTLS on Postgres in github.com/traefik/traefik

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-259492. NVD-2026-259493. OSV-2026-259494. OSV-GO-2026-44845. GHSA-89p3-4642-cr2w6. GCVE-2026-259497. access.redhat.com8. ACCESS-CVE-2026-259499. SECURITY-cve-2026-25949.json10. GHSA-89p3-4642-cr2w

References

1. https://github.com/traefik/traefik/security/advisories/GHSA-89p3-4642-cr2w2. https://github.com/traefik/traefik/commit/31e566e9f1d7888ccb6fbc18bfed427203c356783. https://bugzilla.redhat.com/show_bug.cgi?id=24395224. https://github.com/traefik/traefik/releases/tag/v3.6.8

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.