hi is there any fixes for below CVE using v2.10.7 CVE-2023-6237 CVE-2024-0727 CVE-2023-48795 CVE-2023-6129

CVE-2023-6237 : it's an OpenSSL CVE, Traefik doesn't OpensSSL CVE-2024-0727 is also related to OpenSSL CVE-2023-48795 : is about OpenSSH, Traefik doesn't use it. CVE-2023-6129 is also related to OpenSSL Traefik doesn't need to fix CVE that doesn't impact it.

Maybe check [image] New Security Updates for Traefik 2.10 (2.10.6) and 3.0 (3.0.0-beta5) Announcements On November 28, 2023, we patched the following vulnerabilities with Traefik Proxy 2.10.6 and 3.0.0-beta5: CVE-2023-45283 CVE-2023-45284 CVE-2023-47124 (Fixed with the P…

We got the above vulnerability for the traefik images

The CVE that is mentioned is not covered

We (Traefik Maintainers) maintain only the latest versions: v2.11 and v3.0 Same thing for the Docker images. Those CVEs are false positives in the context of Traefik because Traefik doesn't use OpenSSL or OpenSSH. Feel free to create your own custom Docker image if needed.

Thanks, for the info. are there any fixes for below. CVE-2023-28840 CVE-2023-49295 CVE-2023-28841 CVE-2023-28842

CVE-2023-28840 : Traefik is not impacted because it only uses the API client of Docker. CVE-2023-49295 : already fixed CVE-2023-28841 : Traefik is not impacted because it only uses the API client of Docker. CVE-2023-28842 : Traefik is not impacted because it only uses the API client of Docker. In all …

Vulnerability for v2.10.7

Traefik Traefik v2

bluepuma77 April 29, 2024, 8:51pm 2

Maybe check

Topic		Replies	Views
Potential CVEs in v2.10.7 Traefik v2 file	4	402	May 15, 2024
Several CVE's present on the latest traefik version Traefik v2	1	603	November 1, 2023
Is Traefik vulnerable to CVE-2023-44487? Traefik v2 kubernetes-crd , kubernetes-ingress	10	9198	October 16, 2023
New Security Updates for Traefik 2.10 and 3.0.0-beta Traefik v2	2	1436	October 19, 2023
New Security Updates for Traefik 2.10 (2.10.6) and 3.0 (3.0.0-beta5) Announcements	0	674	December 4, 2023

Vulnerability for v2.10.7

Related topics