GitHub Advisoryadvisory · Go

GHSA-hxr6-2p24-hf98 Traefik affected by CVE-2024-53259

MEDIUM Published 2024-12-17 Modified 2024-12-20 Official page ↗
Ecosystem
Go
Packages
github.com/traefik/traefik/v2, github.com/traefik/traefik/v3
Severity
Moderate
Reviewed
2024-12-17

Affected packages

• Go github.com/traefik/traefik/v2: < 2.11.15 → fixed in 2.11.15 • Go github.com/traefik/traefik/v3: < 3.2.2 → fixed in 3.2.2

Description

There is a potential vulnerability in Traefik managing HTTP/3 connections. More details in the CVE-2024-53259. Patches • https://github.com/traefik/traefik/releases/tag/v2.11.15 • https://github.com/traefik/traefik/releases/tag/v3.2.2 Workarounds No workaround For more information If you have any questions or comments about this advisory, please open an issue.

References