CVE-2026-119574 in Traefik
Summary
by MITRE • 10/30/2026
Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attackers to crash the process by abusing HTTP/1 protocol upgrades. Attackers can repeatedly open and abort upgraded connections such as WebSocket, corrupting the unsynchronized shared bufio.Reader and triggering an unrecovered panic that terminates Traefik.
If you want to get best quality of vulnerability data, you may have to visit VulDB.