| Package | Affected versions | Patched versions |
|---|---|---|
| traefik | ≥ 3.2.0, < 3.7.15 | 3.7.15 |
Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attackers to crash the process by abusing HTTP/1 protocol upgrades. Attackers can repeatedly open and abort upgraded connections such as WebSocket, corrupting the unsynchronized shared bufio.Reader and triggering an unrecovered panic that terminates Traefik.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free