—
GO-2022-1152
Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik
Quick fix
GO-2022-1152 — github.com/traefik/traefik/v2: upgrade to the fixed version with the command below.
go get github.com/traefik/traefik/v2@v2.9.6Details
Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/traefik/traefik
Introduced in:
0 No fixed version published yet for github.com/traefik/traefik (go modules). Pin to a known-safe version or switch to an alternative.
Go / github.com/traefik/traefik/v2
Introduced in:
0 Fixed in: 2.9.6 Fix
go get github.com/traefik/traefik/v2@v2.9.6 References
- https://github.com/traefik/traefik/security/advisories/GHSA-468w-8x39-gj5v [ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2022-46153 [ADVISORY]
- https://github.com/traefik/traefik/commit/7e3fe48b80083b41e9ff82a474a36484cabc701a [FIX]
- https://doc.traefik.io/traefik/v2.9/https/tls/#tls-options [WEB]
- https://github.com/traefik/traefik/releases/tag/v2.9.6 [WEB]