# Security Notification (Threat: Low) - X-Forwarded-Prefix Header Validation

**URL:** <https://community.traefik.io/t/security-notification-threat-low-x-forwarded-prefix-header-validation/7146>\
**Category:** Traefik\
**Tags:** dashboard-api\
**Created:** [July 30, 2020, 2:14pm UTC](https://community.traefik.io/t/security-notification-threat-low-x-forwarded-prefix-header-validation/7146 "2020-07-30T14:14:11Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![notsureifkevin](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/notsureifkevin/32/1940_2.png) [@notsureifkevin](https://community.traefik.io/u/notsureifkevin)\
**Post date:** [July 30, 2020, 2:14pm UTC](https://community.traefik.io/t/security-notification-threat-low-x-forwarded-prefix-header-validation/7146/1 "2020-07-30T14:14:11Z")

</div>

The GitHub Security Lab Team notified Containous on behalf of the GitHub Application Security Team (GHAS) about a potential open redirect vulnerability in the Traefik Dashboard API.

The potential for exploitation is low and there have been no known active exploits reported in the wild. Remediation steps include upgrading Traefik to the patch versions indicated in the notification or applying the workaround provided in the notification.

[Click here to view the full notification](https://github.com/containous/traefik/security/advisories/GHSA-6qq8-5wq3-86rp).

If you have any questions or comments, please reply to this thread.