This repository publicly exposes the security advisories that impact Traefik Enterprise.
Traefik Labs is committed to transparency about the security of its products. This repository is the central place where we publish:
- Vulnerabilities affecting Traefik Enterprise, with their severity and impact.
- The affected and fixed versions.
- Mitigations and workarounds, when available.
- References to the related CVE identifiers, when assigned.
Advisories for the open source Traefik Proxy are published separately in the traefik/traefik repository.
To be notified when a new advisory is published, use the Watch button of this repository and select Custom > Pull requests or Releases, depending on how advisories are published here.
If you believe you have found a security vulnerability in Traefik Enterprise, do not open a public issue or pull request.
Please report it privately to the Traefik Labs security team at security@traefik.io, with:
- A description of the issue and its potential impact.
- The affected version(s).
- Steps to reproduce, or a proof of concept.
We will acknowledge your report, keep you updated on the progress, and coordinate disclosure with you.
Traefik Enterprise customers with questions about an advisory can contact Traefik Labs support.