Go/github.com/traefik/traefik/v3 CVE-2025-47952: critical 9.1, EPSS 0.94%

Traefik allows path traversal using url encoding

Action: Upgrade github.com/traefik/traefik/v3 to 3.4.1 or later.

go get github.com/traefik/traefik/v3@v3.4.1

Affected

Fixed versions

Sources

• osv: GHSA-vrch-868g-9jx5
• nvd: CVE-2025-47952
• https://github.com/traefik/traefik/security/advisories/GHSA-vrch-868g-9jx5
• https://github.com/traefik/traefik/commit/08d5dfee0164aa54dd44a467870042e18e8d3f00
• https://github.com/traefik/traefik
• https://github.com/traefik/traefik/releases/tag/v2.11.25
• https://github.com/traefik/traefik/releases/tag/v3.4.1

CVE-2025-47952 · published 2025-05-28T14:25:09Z · modified 2025-11-27T08:59:46.377512Z · JSON