| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/containous/traefik | all versions | |
| github.com/containous/traefik/v2 | < 2.2.2 | 2.2.2 |
| github.com/traefik/traefik/v2 | < 2.2.2 | 2.2.2 |
| traefik | ≥ 2.0.0, < 2.0.1 | 2.0.1 |
Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT should have occurred.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free