{"action":"Upgrade github.com/traefik/traefik/v3 to 3.4.1 or later.","affected":[{"fixed":"3.4.1","introduced":"0"}],"component":"github.com/traefik/traefik/v3","cve_ids":["CVE-2025-47952"],"ecosystem":"Go","epss":0.00943,"exploited":false,"fixed_versions":["3.4.1"],"ghsa_id":"GHSA-vrch-868g-9jx5","id":"tcs_01M5KFPKB2BNHFZ4FRV3KCVSP3","modified_at":"2025-11-27T08:59:46.377512Z","published_at":"2025-05-28T14:25:09Z","references":["https://osv.dev/vulnerability/GHSA-vrch-868g-9jx5","https://github.com/traefik/traefik/security/advisories/GHSA-vrch-868g-9jx5","https://nvd.nist.gov/vuln/detail/CVE-2025-47952","https://github.com/traefik/traefik/commit/08d5dfee0164aa54dd44a467870042e18e8d3f00","https://github.com/traefik/traefik","https://github.com/traefik/traefik/releases/tag/v2.11.25","https://github.com/traefik/traefik/releases/tag/v3.4.1"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-vrch-868g-9jx5","url":"https://osv.dev/vulnerability/GHSA-vrch-868g-9jx5"},{"source":"nvd","source_id":"CVE-2025-47952","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47952"}],"summary":"Traefik allows path traversal using url encoding"}