tocsin

CVE-2025-47952

6 advisories.

Go/github.com/traefik/traefik/v3 CVE-2025-47952: low, EPSS 0.94%

Traefik allows path traversal using url encoding

Action: Upgrade github.com/traefik/traefik/v3 to 3.4.1 or later.

go get github.com/traefik/traefik/v3@v3.4.1

Affected

introducedfixedlast affected
03.4.1-

Fixed versions

3.4.1

Sources

CVE-2025-47952 · published · modified · JSON

Go/github.com/traefik/traefik/v2 CVE-2025-47952: low, EPSS 0.94%

Traefik allows path traversal using url encoding

Action: Upgrade github.com/traefik/traefik/v2 to 2.11.25 or later.

go get github.com/traefik/traefik/v2@v2.11.25

Affected

introducedfixedlast affected
02.11.25-

Fixed versions

2.11.25

Sources

CVE-2025-47952 · published · modified · JSON

Go/github.com/traefik/traefik CVE-2025-47952: low, EPSS 0.94%

Traefik allows path traversal using url encoding

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-1.7.34

Fixed versions

No fixed version in the source.

Sources

CVE-2025-47952 · published · modified · JSON

Go/github.com/traefik/traefik CVE-2025-47952: unknown, EPSS 0.94%

Traefik allows path traversal using url encoding in github.com/traefik/traefik

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-47952 · published · modified · JSON

Go/github.com/traefik/traefik/v2 CVE-2025-47952: unknown, EPSS 0.94%

Traefik allows path traversal using url encoding in github.com/traefik/traefik

Action: Upgrade github.com/traefik/traefik/v2 to 2.11.25 or later.

go get github.com/traefik/traefik/v2@v2.11.25

Affected

introducedfixedlast affected
02.11.25-

Fixed versions

2.11.25

Sources

CVE-2025-47952 · published · modified · JSON

Go/github.com/traefik/traefik/v3 CVE-2025-47952: unknown, EPSS 0.94%

Traefik allows path traversal using url encoding in github.com/traefik/traefik

Action: Upgrade github.com/traefik/traefik/v3 to 3.4.1 or later.

go get github.com/traefik/traefik/v3@v3.4.1

Affected

introducedfixedlast affected
03.4.1-

Fixed versions

3.4.1

Sources

CVE-2025-47952 · published · modified · JSON