Go/github.com/traefik/traefik CVE-2026-88008: unknown, EPSS 0.49%

Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization in github.com/traefik/traefik

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6468
• https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326
• https://nvd.nist.gov/vuln/detail/CVE-2026-88008
• https://github.com/traefik/traefik/commit/a277e94664ffc1ce9543df552d3bbf48d4d3b8b3
• https://github.com/traefik/traefik/pull/13797
• https://github.com/traefik/traefik/releases/tag/v2.11.57
• https://github.com/traefik/traefik/releases/tag/v3.7.13

CVE-2026-88008 · published 2026-09-16T16:56:22Z · modified 2026-09-17T17:30:12.189273918Z · JSON