logo

Database

Security controls bypass or absence In github.com/traefik/traefik/v2

Description

Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails in github.com/traefik/traefik

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-547622. NVD-2026-547623. OSV-2026-547624. OSV-GO-2026-51285. GHSA-4mr2-fg2p-w63c6. GCVE-2026-547627. GHSA-4mr2-fg2p-w63c

References

1. https://github.com/traefik/traefik/security/advisories/GHSA-4mr2-fg2p-w63c2. https://github.com/traefik/traefik/releases/tag/v3.7.5

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.