diff --git a/advisories/github-reviewed/2024/12/GHSA-hxr6-2p24-hf98/GHSA-hxr6-2p24-hf98.json b/advisories/github-reviewed/2024/12/GHSA-hxr6-2p24-hf98/GHSA-hxr6-2p24-hf98.json new file mode 100644 index 00000000000..48815d18a09 --- /dev/null +++ b/advisories/github-reviewed/2024/12/GHSA-hxr6-2p24-hf98/GHSA-hxr6-2p24-hf98.json @@ -0,0 +1,75 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hxr6-2p24-hf98", + "modified": "2024-12-17T15:13:44Z", + "published": "2024-12-17T15:13:44Z", + "aliases": [], + "summary": "Traefik affected by CVE-2024-53259", + "details": "There is a potential vulnerability in Traefik managing HTTP/3 connections.\n\nMore details in the [CVE-2024-53259](https://nvd.nist.gov/vuln/detail/CVE-2024-53259).\n\n## Patches\n\n- https://github.com/traefik/traefik/releases/tag/v2.11.15\n- https://github.com/traefik/traefik/releases/tag/v3.2.2\n\n## Workarounds\n\nNo workaround\n\n## For more information\n\nIf you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).", + "severity": [], + "affected": [ + { + "package": { + "ecosystem": "Go", + "name": "github.com/traefik/traefik/v2" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.11.15" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/traefik/traefik/v3" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.2.2" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/traefik/traefik/security/advisories/GHSA-hxr6-2p24-hf98" + }, + { + "type": "PACKAGE", + "url": "https://github.com/traefik/traefik" + }, + { + "type": "WEB", + "url": "https://github.com/traefik/traefik/releases/tag/v2.11.15" + }, + { + "type": "WEB", + "url": "https://github.com/traefik/traefik/releases/tag/v3.2.2" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-12-17T15:13:44Z", + "nvd_published_at": null + } +} \ No newline at end of file