Hi, can you please confirm if Traefik v2 is affected by the following Go CVEs and what version should be used to have these fixed: net/http, net/textproto: denial of service from excessive memory allocation This is CVE-2023-24534 and Go issue net/http, net/textproto: denial of service from excess…

Cve-2023-24534, cve-2023-24536

svx April 12, 2023, 12:37pm 2

Hey @flxk, sorry for the late reply!

We released new versions of 2.9 and 2.10-rc2 related to CVE-2023-24534.

1 Like

Topic		Replies	Views
CVE vulnerability Traefik CVE-2022-41717 Traefik v2 file	2	388	December 7, 2022
New Security Updates for Traefik 2.10 and 3.0.0-beta Traefik v2	2	1295	October 19, 2023
CVE vulnerabilities for traefik:v2.9.5 - CVE-2021-41803, CVE-2022-40716, CVE-2022-32149 Traefik v2 kubernetes-ingress , middleware	2	889	December 9, 2022
Is Traefik vulnerable to CVE-2023-44487? Traefik v2 kubernetes-crd , kubernetes-ingress	11	8154	October 19, 2023
New Security Updates for Traefik 2.9 and 2.10 Traefik v2	0	488	April 13, 2023