Go/github.com/traefik/traefik CVE-2026-71326: unknown, EPSS 0.34%

Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing in github.com/traefik/traefik

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6204
• https://github.com/traefik/traefik/security/advisories/GHSA-6765-c87h-8mrf
• https://github.com/traefik/traefik/commit/b5ace8eb5d6779980567f5e75efd2d9e08b7e350
• https://github.com/traefik/traefik/pull/13572
• https://github.com/traefik/traefik/releases/tag/v3.6.25
• https://github.com/traefik/traefik/releases/tag/v3.7.10

CVE-2026-71326 · published 2026-08-18T14:32:29Z · modified 2026-08-18T15:00:14.365618504Z · JSON