tocsin

CVE-2026-22045

5 advisories.

Go/github.com/traefik/traefik/v3 CVE-2026-22045: medium 5.9

Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall

Action: Upgrade github.com/traefik/traefik/v3 to 3.6.7 or later.

go get github.com/traefik/traefik/v3@v3.6.7

Affected

introducedfixedlast affected
03.6.7-

Fixed versions

3.6.7

Sources

CVE-2026-22045 · published · modified · JSON

Go/github.com/traefik/traefik/v2 CVE-2026-22045: medium 5.9

Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall

Action: Upgrade github.com/traefik/traefik/v2 to 2.11.35 or later.

go get github.com/traefik/traefik/v2@v2.11.35

Affected

introducedfixedlast affected
02.11.35-

Fixed versions

2.11.35

Sources

CVE-2026-22045 · published · modified · JSON

Go/github.com/traefik/traefik CVE-2026-22045: unknown

Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall in github.com/traefik/traefik

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-22045 · published · modified · JSON

Go/github.com/traefik/traefik/v2 CVE-2026-22045: unknown

Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall in github.com/traefik/traefik

Action: Upgrade github.com/traefik/traefik/v2 to 2.11.35 or later.

go get github.com/traefik/traefik/v2@v2.11.35

Affected

introducedfixedlast affected
02.11.35-

Fixed versions

2.11.35

Sources

CVE-2026-22045 · published · modified · JSON

Go/github.com/traefik/traefik/v3 CVE-2026-22045: unknown

Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall in github.com/traefik/traefik

Action: Upgrade github.com/traefik/traefik/v3 to 3.6.7 or later.

go get github.com/traefik/traefik/v3@v3.6.7

Affected

introducedfixedlast affected
03.6.7-

Fixed versions

3.6.7

Sources

CVE-2026-22045 · published · modified · JSON