All vulnerabilities

Servers and applications

CVE-2025-22871

Security Vulnerability: Go 1.23.x < 1.23.8 - HTTP Request Smuggling Vulnerability - 1.23.8

Severity
Critical 9.1
Published
18 Apr 2025
Last changed
18 Apr 2025
Added to UpHeron
3 Nov 2026
Fixed in
1.23.8
Also known as
GHSA-5423-jcjm-2gpv
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
TraefikServers and applications · github:traefik/traefik
  • Every version before 1.23.8

References