| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/traefik/traefik/v2 | ≥ 2.9.0-rc1, < 2.9.0-rc5< 2.8.8 | 2.9.0-rc52.8.8 |
| traefik | = 2.9.0< 2.8.8 | 2.8.8 |
There is a potential vulnerability in Traefik managing HTTP/2 connections. A closing HTTP/2 server connection could hang forever because of a subsequent fatal error. This failure mode could be exploited to cause a denial of service.
Traefik v2.8.x: https://github.com/traefik/traefik/releases/tag/v2.8.8 Traefik v2.9.x: https://github.com/traefik/traefik/releases/tag/v2.9.0-rc5
No workaround.
If you have any questions or comments about this advisory, please open an issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free