{"action":"Upgrade github.com/traefik/traefik to 1.7.26 or later.","affected":[{"fixed":"1.7.26","introduced":"1.5.0-rc5"}],"component":"github.com/traefik/traefik","cve_ids":["CVE-2020-15129"],"ecosystem":"Go","epss":0.08011,"exploited":false,"fixed_versions":["1.7.26"],"ghsa_id":"GHSA-6qq8-5wq3-86rp","id":"tcs_01M5KF0NC5DE2AXWYCJFGKX2K3","modified_at":"2026-07-08T06:28:33.650747502Z","published_at":"2022-02-11T23:19:21Z","references":["https://osv.dev/vulnerability/GHSA-6qq8-5wq3-86rp","https://github.com/containous/traefik/security/advisories/GHSA-6qq8-5wq3-86rp","https://nvd.nist.gov/vuln/detail/CVE-2020-15129","https://github.com/containous/traefik/pull/7109","https://github.com/containous/traefik/commit/cfa04c300c5db95ae8a52c31a9d973b6dd9c2254","https://github.com/containous/traefik/commit/e63db782c11c7b8bfce30be4c902e7ef8f9f33d2","https://github.com/traefik/traefik/commit/e2c5f3712f68993de8ed3cb30da9ec0aa11acb09","https://github.com/containous/traefik/releases/tag/v1.7.26","https://github.com/containous/traefik/releases/tag/v2.2.8","https://github.com/containous/traefik/releases/tag/v2.3.0-rc3","https://github.com/traefik/traefik"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6qq8-5wq3-86rp","url":"https://osv.dev/vulnerability/GHSA-6qq8-5wq3-86rp"}],"summary":"Traefik vulnerable to Open Redirect via handling of X-Forwarded-Prefix header"}