All vulnerabilities

Go

CVE-2025-66491

Traefik Inverted TLS Verification Logic in ingress-nginx Provider in github.com/traefik/traefik

Severity: Unrated
Published: 15 Dec 2025
Last changed: 2 Jul 2026
Added to UpHeron: 22 Oct 2026
Fixed in: 3.6.3
Also known as: GHSA-7vww-mvcr-x6vj, GO-2025-4205
Sources: OSV.dev and GitHub

Affected software

Software	Affected versions
github.com/traefik/traefikGo · `osv:Go:github.com/traefik/traefik`	Every version
TraefikGo · `osv:Go:github.com/traefik/traefik/v2`	Every version
TraefikGo · `osv:Go:github.com/traefik/traefik/v3`	From 3.5.0 before 3.6.3

References

CVE.org https://www.cve.org/CVERecord?id=CVE-2025-66491
GitHub Advisory Database https://github.com/advisories/GHSA-7vww-mvcr-x6vj
OSV.dev https://osv.dev/vulnerability/GO-2025-4205