github.com/containous/traefik (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/containous/traefik, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2019-20894 — CVSS 7.5 (high): Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where…
• CVE-2020-9321 — CVSS 7.5 (high): configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers…
• CVE-2020-15129 — CVSS 6.1 (medium): In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik's handling of the…