{ "canonical_id": "traefik--CVE-2025-66491", "system_id": "traefik", "display_name": "Traefik", "category": "servers", "advisory_mode": "server", "title": "Traefik Inverted TLS Verification Logic in ingress-nginx Provider in github.com/traefik/traefik", "summary": "Traefik Inverted TLS Verification Logic in ingress-nginx Provider in github.com/traefik/traefik", "published_at": "2025-12-15T19:37:35Z", "updated_at": "2026-03-03T04:57:46.762301Z", "severity": "unknown", "cvss_score": null, "exploit_status": "unknown", "source_confidence": "official", "official_source_url": "https://github.com/traefik/traefik/security/advisories/GHSA-7vww-mvcr-x6vj", "secondary_source_urls": [ "https://nvd.nist.gov/vuln/detail/CVE-2025-66491", "https://github.com/traefik/traefik/commit/14a1aedf5704673d875d210d7bacf103a43c77e4", "https://github.com/traefik/traefik/releases/tag/v3.6.3" ], "aliases": [ "CVE-2025-66491", "GHSA-7vww-mvcr-x6vj", "GO-2025-4205" ], "cve_ids": [ "CVE-2025-66491" ], "ghsa_ids": [ "GHSA-7vww-mvcr-x6vj" ], "osv_ids": [ "GO-2025-4205" ], "affected_versions": [ "introduced=0", "introduced=3.5.0, fixed<3.6.3" ], "fixed_versions": [ "3.6.3" ], "package_name": "github.com/traefik/traefik/v3", "render_markdown": false, "case_path": null, "secure_code_topics": [ "proxy-trust-boundary", "request-smuggling-boundary" ], "status": "generated", "triage_reasons": [], "verification_status": "triage-manual", "verification_mode": "synthetic", "last_verified_at": null, "last_run_id": null, "evidence_bundle": null, "historical_status": null, "latest_status": null, "browser_evidence": { "required": false, "present": false, "refs": [] }, "repro_profile_id": "proxy-boundary-generic", "artifact_mode": "synthetic", "blocked_reason": null, "metadata": { "source_names": [ "OSV Traefik" ], "source_kinds": [ "osv-batch" ], "candidate_count": 1 } }