logo

Database

Lack of data validation - Type confusion In github.com/traefik/traefik

Description

traefik CVE-2024-45410 fix bypass: lowercase Connection tokens can delete traefik-managed forwarded identity headers (for example, X-Real-Ip) in github.com/traefik/traefik

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-290542. NVD-2026-290543. OSV-2026-290544. OSV-GO-2026-45975. GHSA-92mv-8f8w-wq526. GCVE-2026-290547. GHSA-92mv-8f8w-wq52

References

1. https://github.com/traefik/traefik/security/advisories/GHSA-92mv-8f8w-wq522. https://github.com/traefik/traefik/releases/tag/v2.11.383. https://github.com/traefik/traefik/releases/tag/v3.6.9

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.