Most recent entries from all

EUVD-2026-216403

2026-10-04T20:46:42.238129+00:00

EUVD-2026-216403

fkie_cve-2023-29013

2026-10-04T20:46:42.238170+00:00

Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer for deploying microservices. There is a vulnerability in Go when parsing the HTTP headers, which impacts Traefik. HTTP header parsing could allocate substantially more memory than required to hold the parsed headers. This behavior could be exploited to cause a denial of service. This issue has been patched in versions 2.9.10 and 2.10.0-rc2.

GHSA-7hj9-rv74-5g92 — Traefik HTTP header parsing could cause a denial of service

2026-10-04T20:46:42.238205+00:00

Affected: Go: github.com/traefik/traefik/v2

### Impact

There is a vulnerability in [Go when parsing the HTTP headers](https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8/m/OV40vnafAwAJ), which impacts Traefik. HTTP header parsing could allocate substantially more memory than required to hold the parsed headers. This behavior could be exploited to cause a denial of service.

### References

- [CVE-2023-24534](https://www.cve.org/CVERecord?id=CVE-2023-24534)

### Patches - https://github.com/traefik/traefik/releases/tag/v2.9.10 - https://github.com/traefik/traefik/releases/tag/v2.10.0-rc2

### Workarounds

No workaround.

### For more information

If you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).

gsd-2023-29013

2026-10-04T20:46:42.238243+00:00

gsd-2023-29013

openSUSE-SU-2024:13007-1 — traefik-2.10.1-1.1 on GA media

2026-10-04T20:46:42.238256+00:00

traefik-2.10.1-1.1 on GA media