Threats tagged 'ghsa-r4c9-879g-3g2v'

Traefik versions from 3.2.0 up to but not including 3.7.15 contain a data race vulnerability in the experimental FastProxy feature. This flaw allows unauthenticated attackers to crash the Traefik process by exploiting HTTP/1 protocol upgrades, such as repeatedly opening and aborting upgraded connections like WebSocket. The attack corrupts an unsynchronized shared bufio.Reader, causing an unrecovered panic that terminates the service.