{"id":"CGA-95rg-cwp2-gp7j","modified":"2026-09-07T01:30:42.828002427Z","published":"2026-03-30T15:46:27Z","upstream":["GHSA-46wh-3698-f2cx","GO-2026-4897"],"references":[{"type":"WEB","url":"https://github.com/traefik/traefik/security/advisories/GHSA-46wh-3698-f2cx"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-p77j-4mvh-x3m3"},{"type":"PACKAGE","url":"https://github.com/traefik/traefik"},{"type":"WEB","url":"https://github.com/traefik/traefik/blob/67c64ed9b25fbb90f1086977a62827133a7aa01b/go.mod#L108"},{"type":"WEB","url":"https://github.com/traefik/traefik/releases/tag/v2.11.42"},{"type":"WEB","url":"https://github.com/traefik/traefik/releases/tag/v3.6.12"},{"type":"WEB","url":"https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3"}],"affected":[{"package":{"name":"traefik-2.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/traefik-2.11?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.42-r0"}]}],"ecosystem_specific":{"components":[{"latest_event_status":"fixed","latest_event_timestamp":"2026-04-07T00:51:11Z","component_name":"github.com/traefik/traefik/v2","component_version":"v2.11.41","component_type":"go-module","component_location":"/usr/bin/traefik","component_purl":"pkg:golang/github.com/traefik/traefik/v2@v2.11.41"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-95rg-cwp2-gp7j.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}]}