更新: 269 个文件 - 2026-03-30 03:53:37
这个提交包含在:
@@ -5,14 +5,14 @@
|
||||
- 系统 ID: `traefik`
|
||||
- 分类: `servers`
|
||||
- 覆盖策略: `rolling-24m`
|
||||
- 总案例数: `47`
|
||||
- 近 30 天新增/更新: `19`
|
||||
- 总案例数: `48`
|
||||
- 近 30 天新增/更新: `20`
|
||||
- 重点 Markdown 案例数: `0`
|
||||
- 已实证(真实版本): `0`
|
||||
- 已实证(synthetic): `0`
|
||||
- 阻塞数: `0`
|
||||
- 待人工/缺浏览器证据: `47`
|
||||
- 最近渲染时间: `2026-03-29T10:50:54+00:00`
|
||||
- 待人工/缺浏览器证据: `48`
|
||||
- 最近渲染时间: `2026-03-30T09:18:25+00:00`
|
||||
|
||||
## 目标约束
|
||||
|
||||
@@ -31,6 +31,7 @@
|
||||
|
||||
| 标题 | 严重度 | 案例状态 | 实证状态 | 实证方式 | 来源置信度 | 更新时间 | 案例页 |
|
||||
|------|--------|----------|----------|----------|------------|----------|--------|
|
||||
| Traefik: Deny Rule Bypass via Unauthenticated Malicious gRPC Requests in gRPC-Go Dependency (CVE-2026-33186) | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-29T15:49:22.073498Z` | - |
|
||||
| Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-27T20:49:46.252668Z` | - |
|
||||
| Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-27T18:03:26.283891Z` | - |
|
||||
| Traefik Affected by BasicAuth Middleware Timing Attack Allows Username Enumeration | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-23T18:56:05.020639Z` | - |
|
||||
|
||||
在新工单中引用
屏蔽一个用户