https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:00:17 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-64473 cnvd-2021-64473 https://cve.radiocsirt.org/vuln/cnvd-2021-64473 https://cve.radiocsirt.org/vuln/euvd-2026-28154 EUVD-2026-28154 https://cve.radiocsirt.org/vuln/euvd-2026-28154 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32813 <p>Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.4.13, there exists a potential header vulnerability in Traefik&#39;s handling of the Connection header. Active exploitation of this issue is unlikely, as it requires that a removed header would lead to a privilege escalation, however, the Traefik team has addressed this issue to prevent any potential abuse. If one has a chain of Traefik middlewares, and one of them sets a request header, then sending a request with a certain Connection header will cause it to be removed before the request is sent. In this case, the backend does not see the request header. A patch is available in version 2.4.13. There are no known workarounds aside from upgrading.</p> <p>Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.4.13, there exists a potential header vulnerability in Traefik&#39;s handling of the Connection header. Active exploitation of this issue is unlikely, as it requires that a removed header would lead to a privilege escalation, however, the Traefik team has addressed this issue to prevent any potential abuse. If one has a chain of Traefik middlewares, and one of them sets a request header, then sending a request with a certain Connection header will cause it to be removed before the request is sent. In this case, the backend does not see the request header. A patch is available in version 2.4.13. There are no known workarounds aside from upgrading.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32813 https://cve.radiocsirt.org/vuln/ghsa-m697-4v8f-55qg <p><strong>Affected:</strong> Go: github.com/traefik/traefik/v2, Go: github.com/traefik/traefik</p> <p># Impact</p> <p>There exists a potential header vulnerability in Traefik&#39;s handling of the Connection header. Active exploitation of this issue is unlikely, as it requires that a removed header would lead to a privilege escalation, however, the Traefik team has addressed this issue to prevent any potential abuse.</p> <p># Details</p> <p>If you have a chain of Traefik middlewares, and one of them sets a request header `Important-Security-Header`, then sending a request with the following Connection header will cause it to be removed before the request was sent:</p> <p>``` curl &#39;https://example.com&#39; -H &#34;Connection: Important-Security-Header&#34; -0 ```</p> <p>In this case, the backend does not see the request header `Important-Security-Header`.</p> <p># Patches</p> <p>Traefik v2.4.x: https://github.com/traefik/traefik/releases/tag/v2.4.13</p> <p># Workarounds</p> <p>No.</p> <p># For more information</p> <p>If you have any questions or comments about this advisory, [open an issue](https://github.com/traefik/traefik/issues).</p> <p><strong>Affected:</strong> Go: github.com/traefik/traefik/v2, Go: github.com/traefik/traefik</p> <p># Impact</p> <p>There exists a potential header vulnerability in Traefik&#39;s handling of the Connection header. Active exploitation of this issue is unlikely, as it requires that a removed header would lead to a privilege escalation, however, the Traefik team has addressed this issue to prevent any potential abuse.</p> <p># Details</p> <p>If you have a chain of Traefik middlewares, and one of them sets a request header `Important-Security-Header`, then sending a request with the following Connection header will cause it to be removed before the request was sent:</p> <p>``` curl &#39;https://example.com&#39; -H &#34;Connection: Important-Security-Header&#34; -0 ```</p> <p>In this case, the backend does not see the request header `Important-Security-Header`.</p> <p># Patches</p> <p>Traefik v2.4.x: https://github.com/traefik/traefik/releases/tag/v2.4.13</p> <p># Workarounds</p> <p>No.</p> <p># For more information</p> <p>If you have any questions or comments about this advisory, [open an issue](https://github.com/traefik/traefik/issues).</p> https://cve.radiocsirt.org/vuln/ghsa-m697-4v8f-55qg https://cve.radiocsirt.org/vuln/gsd-2021-32813 gsd-2021-32813 https://cve.radiocsirt.org/vuln/gsd-2021-32813