GO-2025-4205
NoneCVSS
—
EPSS
—
Published
Dec 15, 2025
CISA due date
—
The record
Traefik Inverted TLS Verification Logic in ingress-nginx Provider in github.com/traefik/traefik
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/traefik/traefik | 0 | No fix |
| Go | github.com/traefik/traefik/v2 | 0 | No fix |
| Go | github.com/traefik/traefik/v3 | 3.5.0 | 3.6.3 |
| go | github.com/traefik/traefik/v3 | 3.5.0 | 3.6.3 |
Related vulnerabilities
- CVE-2025-66491 Traefik has Inverted TLS Verification Logic in its ingress-nginx Provider Same vulnerability
- GO-2026-4530 Traefik affected by TLS ClientAuth Bypass on HTTP/3 in github.com/traefik/traefik Also affects github.com/traefik/traefik
- GO-2026-4484 Traefik: TCP readTimeout bypass via STARTTLS on Postgres in github.com/traefik/traefik Also affects github.com/traefik/traefik
- CVE-2026-25949 Traefik is an HTTP reverse proxy and load balancer. Also affects github.com/traefik/traefik
- GO-2026-4322 Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall in… Also affects github.com/traefik/traefik
- CVE-2026-22045 Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall Also affects github.com/traefik/traefik
- GO-2025-4206 Path Normalization Bypass in Traefik Router + Middleware Rules in… Also affects github.com/traefik/traefik
- CVE-2025-66490 Traefik is an HTTP reverse proxy and load balancer. Also affects github.com/traefik/traefik