Traefik HTTP/2 connections management could cause a denial of service

Description

References

• traefik/traefik security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2022-39271 · ADVISORY
• traefik/traefik · PACKAGE
• traefik/traefik release v2.8.8 · WEB
• traefik/traefik release v2.9.0-rc5 · WEB

More vulnerabilities in github.com/traefik/traefik/v2

• CVE-2026-88012MEDIUM 5.3Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints do not apply entryPo…
• CVE-2026-88011HIGH 8.1Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-supplied dot-form he…
• CVE-2026-88009HIGH 8.2Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request targ…
• CVE-2026-88008CRITICAL 9.1Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Co…
• CVE-2026-88007CRITICAL 9.1Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does…