Go/github.com/traefik/traefik CVE-2024-28869: high 7.5, EPSS 1.05%

Traefik vulnerable to denial of service with Content-length header

Action: Upgrade github.com/traefik/traefik to 2.11.2 or later.

go get github.com/traefik/traefik@v2.11.2

Affected

Fixed versions

Sources

• osv: GHSA-4vwx-54mw-vqfw#Go/github.com/traefik/traefik
• https://github.com/traefik/traefik/security/advisories/GHSA-4vwx-54mw-vqfw
• https://nvd.nist.gov/vuln/detail/CVE-2024-28869
• https://github.com/traefik/traefik/commit/240b83b77351dfd8cadb91c305b84e9d22e0f9c6
• https://doc.traefik.io/traefik/routing/entrypoints/#respondingtimeouts
• https://github.com/traefik/traefik
• https://github.com/traefik/traefik/releases/tag/v2.11.2
• https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5

CVE-2024-28869 · published 2024-04-12T17:05:13Z · modified 2026-08-07T08:12:18.884950547Z · JSON