监控更新: 2026-03-21 02:17:05

07-framework-security/servers/traefik/INDEX.md

@@ -5,14 +5,14 @@
 - 系统 ID: `traefik`
 - 分类: `servers`
 - 覆盖策略: `rolling-24m`
-- 总案例数: `43`
-- 近 30 天新增/更新: `16`
+- 总案例数: `45`
+- 近 30 天新增/更新: `18`
 - 重点 Markdown 案例数: `0`
 - 已实证(真实版本): `0`
 - 已实证(synthetic): `0`
 - 阻塞数: `0`
-- 待人工/缺浏览器证据: `43`
-- 最近渲染时间: `2026-03-20T15:46:05+00:00`
+- 待人工/缺浏览器证据: `45`
+- 最近渲染时间: `2026-03-21T13:36:58+00:00`
 
 ## 目标约束
 
@@ -31,6 +31,8 @@
 
 | 标题 | 严重度 | 案例状态 | 实证状态 | 实证方式 | 来源置信度 | 更新时间 | 案例页 |
 |------|--------|----------|----------|----------|------------|----------|--------|
+| Traefik Affected by BasicAuth Middleware Timing Attack Allows Username Enumeration | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-20T15:46:26.940872Z` | - |
+| Traefik has a Potential mTLS Bypass via Fragmented TLS ClientHello Causing Pre-SNI Sniff Fallback to Default Non-mTLS TLS Config | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-20T15:46:41.715568Z` | - |
 | Traefik: HTTP/2 frames can cause a running server to panic | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-14T03:09:48.127568Z` | - |
 | Traefik: kubernetes gateway rule injection via unescaped backticks in HTTPRoute match values | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-18T13:59:10.423590Z` | - |
 | traefik CVE-2024-45410 fix bypass: lowercase `Connection` tokens can delete traefik-managed forwarded identity headers (for example, `X-Real-Ip`) | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-05T22:46:31.066201Z` | - |