Vulnerability Database - OSV

GHSA-gm3x-23wp-hc2c

Go/github.com/traefik/traefik
Go/github.com/traefik/traefik/v2
Go/github.com/traefik/traefik/v3

Path Normalization Bypass in Traefik Router + Middleware Rules 08 Dec 2025

Fix available
Severity - 6.9 (Medium)

CLEANSTART-2026-PP49330

CleanStart/forecastle

Security fix for ghsa-gm3x-23wp-hc2c applied in: forecastle 1.0.159-r2 3 days ago

Fix available

GO-2025-4206

Go/github.com/traefik/traefik
Go/github.com/traefik/traefik/v2
Go/github.com/traefik/traefik/v3

Path Normalization Bypass in Traefik Router + Middleware Rules in github.com/traefik/traefik 15 Dec 2025

Fix available

CGA-v427-wpm4-h86v

Chainguard/traefik-3.4
Wolfi/traefik-3.4

See record for full details 12 Dec 2025

No fix available
Severity - 6.9 (Medium)

CGA-8gqc-pj2q-x2w6

Chainguard/traefik-3.4
Wolfi/traefik-3.4

See record for full details 11 Dec 2025

No fix available
Severity - 6.9 (Medium)

MINI-6cw8-c23j-vvcj

MinimOS/traefik-3

See record for full details 09 Dec 2025

Fix available

MINI-2328-c8qx-6xr6

MinimOS/traefik-2

See record for full details 09 Dec 2025

Fix available

CGA-4f7g-pv52-h25p

Chainguard/traefik-fips-3.5

See record for full details 09 Dec 2025

No fix available
Severity - 6.9 (Medium)

CGA-m74c-qfv2-2r5h

Chainguard/traefik-fips-3.5

See record for full details 09 Dec 2025

No fix available
Severity - 6.9 (Medium)

CGA-5fgx-qxgf-qvq5

Chainguard/traefik-3.4
Wolfi/traefik-3.4

See record for full details 09 Dec 2025

No fix available
Severity - 6.9 (Medium)

CGA-rjxm-cvg8-44mv

Chainguard/traefik-3.4
Wolfi/traefik-3.4

See record for full details 09 Dec 2025

No fix available
Severity - 6.9 (Medium)

CVE-2025-66490

github.com/traefik/traefik

Traefik doesn't Prevent Path Normalization Bypass in Router + Middleware Rules 09 Dec 2025

Fix available
Severity - 6.9 (Medium)