{"action":"Upgrade github.com/traefik/traefik/v3 to 3.4.1 or later.","affected":[{"fixed":"3.4.1","introduced":"0"}],"component":"github.com/traefik/traefik/v3","cve_ids":["CVE-2025-47952"],"ecosystem":"Go","epss":0.00983,"exploited":false,"fixed_versions":["3.4.1"],"ghsa_id":"GHSA-vrch-868g-9jx5","id":"tcs_01M5KG8PV61EZEW8Y0525SDP13","modified_at":"2026-03-03T04:56:38.338929Z","published_at":"2025-05-29T20:59:03Z","references":["https://osv.dev/vulnerability/GO-2025-3719","https://github.com/traefik/traefik/security/advisories/GHSA-vrch-868g-9jx5","https://github.com/traefik/traefik/commit/08d5dfee0164aa54dd44a467870042e18e8d3f00","https://github.com/traefik/traefik/releases/tag/v2.11.25","https://github.com/traefik/traefik/releases/tag/v3.4.1"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GO-2025-3719#Go/github.com/traefik/traefik/v3","url":"https://osv.dev/vulnerability/GO-2025-3719"},{"source":"nvd","source_id":"CVE-2025-47952","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47952"}],"summary":"Traefik allows path traversal using url encoding in github.com/traefik/traefik"}