Threats Tagged 'ghsa-cwr6-3wm2-9xhw'
View all threats tagged with 'ghsa-cwr6-3wm2-9xhw'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-cwr6-3wm2-9xhw'
Click on any threat for detailed analysis and mitigation recommendations
Traefik versions v1.x, v2.x through v2.11.55, and v3.0.0 through v3.7.11 have a header canonicalization issue where headers with dots, underscores, and dashes are treated as distinct. This allows an attacker to smuggle alternate forms of headers past Traefik's middleware, potentially causing backend services to use attacker-supplied header values instead of those asserted by Traefik. This can lead to privilege escalation or identity spoofing. The issue is fixed in v2.11.56 and v3.7.12 with a new configuration option that must be explicitly enabled to take effect. Unmaintained versions will not receive patches. Join the discussion | GCVE Database | 09/10/2026, 15:33:18 UTC Added: 09/15/2026, 01:39:30 UTC |
Showing 1 to 1 of 1 result