BSD Portstraefik -- Multiple vulnerabilities
The traefik project releases a new version addressing multiple vulnerabilities: GHSA-5w68-77r2-r64c (Complete authentication bypass in the `digestAuth` middleware) GHSA-g55h-rg46-x9c5 (TLS option confusion in multi-host routers can bypass mTLS for protected hosts) GHSA-j994-9gqj-9hwq (Same-host Ingress TLS option conflict disables client-certificate authentication) GHSA-m6wx-622r-48r9 (Kubernetes Ingress service …
Affected versions
- traefik < 3.7.11
By system
1 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | net/traefik | 3.4.1 | vulnerable since 2026-08-23 | |
| FreeBSD | net/traefik | 3.7.16 | fixed |