-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from Traefik's HTTP/3 implementation using the quic-go library. Both patched versions (2.11.15 and 3.2.2) explicitly update quic-go to v0.48.2, indicating the vulnerability existed in previous library versions. The ServeHTTP() function in http3.Server is the primary entry point for handling HTTP/3 connections, making it the most likely vulnerable component. Confidence is medium because while the dependency link is clear, the exact vulnerable code path isn't explicitly shown in available resources.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/traefik/traefik/v2 | go | < 2.11.15 | 2.11.15 |
| github.com/traefik/traefik/v3 | go | < 3.2.2 | 3.2.2 |