{"id":"EUVD-2025-201731","enisaUuid":"dfa55817-3be3-3719-ad0d-2dbd255b70ef","description":"Traefik is an HTTP reverse proxy and load balancer. For versions prior to 2.11.32 and 2.11.31 through 3.6.2, requests using PathPrefix, Path or PathRegex matchers can bypass path normalization. When Traefik uses path-based routing, requests containing URL-encoded restricted characters (/, \\, Null, ;, ?, #) can bypass the middleware chain and reach unintended backends. For example, a request to http://mydomain.example.com/admin%2F could reach service-a without triggering my-security-middleware, bypassing security controls for the /admin/ path. This issue is fixed in versions 2.11.32 and 3.6.3.","datePublished":"Dec 9, 2025, 12:35:26 AM","dateUpdated":"Dec 9, 2025, 4:03:33 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","references":"https://github.com/traefik/traefik/security/advisories/GHSA-gm3x-23wp-hc2c\nhttps://github.com/traefik/traefik/releases/tag/v2.11.32\nhttps://github.com/traefik/traefik/releases/tag/v3.6.4\n","aliases":"CVE-2025-66490\nGHSA-gm3x-23wp-hc2c\n","assigner":"GitHub_M","epss":0.44,"enisaIdProduct":[{"id":"2264a38d-2f7f-3b8b-a7a1-8459d602f952","product":{"name":"traefik","vendor":{"name":"traefik"}},"product_version":"github.com/traefik/traefik/v2 \u003c 2.11.32"},{"id":"79fd466e-c59e-39aa-bb91-f6659b9cf822","product":{"name":"traefik","vendor":{"name":"traefik"}},"product_version":"github.com/traefik/traefik/v3  \u003c 3.6.3"},{"id":"e7d424fa-af88-37a3-b008-d17132bd5a1d","product":{"name":"traefik","vendor":{"name":"traefik"}},"product_version":"github.com/traefik/traefik ≤ 1.7.34"}],"enisaIdVendor":[{"id":"cda52d18-9189-395d-92bc-802b7e30d7fa","vendor":{"name":"traefik"}}],"enisaIdVulnerability":[{"id":"824fa8eb-5337-3b52-8d9c-7784c9940ef1","vulnerability":{"id":"CVE-2025-66490","description":"Traefik is an HTTP reverse proxy and load balancer. For versions prior to 2.11.32 and 2.11.31 through 3.6.2, requests using PathPrefix, Path or PathRegex matchers can bypass path normalization. When Traefik uses path-based routing, requests containing URL-encoded restricted characters (/, \\, Null, ;, ?, #) can bypass the middleware chain and reach unintended backends. For example, a request to http://mydomain.example.com/admin%2F could reach service-a without triggering my-security-middleware, bypassing security controls for the /admin/ path. This issue is fixed in versions 2.11.32 and 3.6.3.","datePublished":"Dec 9, 2025, 12:35:26 AM","dateUpdated":"Dec 9, 2025, 4:03:33 PM","status":"PUBLISHED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","references":"https://github.com/traefik/traefik/security/advisories/GHSA-gm3x-23wp-hc2c\nhttps://github.com/traefik/traefik/releases/tag/v2.11.32\nhttps://github.com/traefik/traefik/releases/tag/v3.6.4\n","enisa_id":"EUVD-2025-201731\n","assigner":"GitHub_M","epss":0.44,"dataProcessed":"Oct 29, 2026, 7:20:27 AM","vulnerabilityProduct":[{"id":"934fae5e-498f-3adb-a556-1635f45faeab","product":{"name":"traefik","vendor":{"name":"traefik"}},"product_version":"github.com/traefik/traefik/v2 \u003c 2.11.32"},{"id":"b870f688-da03-3060-abee-1882faeb2b90","product":{"name":"traefik","vendor":{"name":"traefik"}},"product_version":"github.com/traefik/traefik/v3  \u003c 3.6.3"},{"id":"f0a6b46b-f587-3809-9f71-99617310ee52","product":{"name":"traefik","vendor":{"name":"traefik"}},"product_version":"github.com/traefik/traefik ≤ 1.7.34"}],"vulnerabilityVendor":[{"id":"248e7164-aac2-3975-8a37-8cf80b81c144","vendor":{"name":"traefik"}}]}},{"id":"da094780-faf2-399a-bbba-2b8aa51e0052","vulnerability":{"id":"GHSA-gm3x-23wp-hc2c","description":"Path Normalization Bypass in Traefik Router + Middleware Rules","datePublished":"Dec 8, 2025, 4:42:30 PM","dateUpdated":"Dec 17, 2025, 12:44:50 AM","baseScore":0.0,"references":"https://github.com/traefik/traefik/security/advisories/GHSA-gm3x-23wp-hc2c\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-66490\nhttps://github.com/traefik/traefik\nhttps://github.com/traefik/traefik/releases/tag/v2.11.32\nhttps://github.com/traefik/traefik/releases/tag/v3.6.4\n","enisa_id":"EUVD-2025-201731\n","aliases":"CVE-2025-66490\nGHSA-gm3x-23wp-hc2c\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:51:54 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"3d19d3ce-30cf-3171-b3e3-5c7799640e9b","advisory":{"id":"RHSA-2026:2456","description":"Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.26.0 Release.","summary":"Red Hat OpenShift Dev Spaces 3.26.0 has been released.","datePublished":"Feb 10, 2026, 5:06:01 PM","dateUpdated":"Oct 24, 2026, 6:42:41 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:2456\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2456.json\n","aliases":"CVE-2024-25621\nCVE-2025-12816\nCVE-2025-15284\nCVE-2025-52881\nCVE-2025-58183\nCVE-2025-61729\nCVE-2025-64756\nCVE-2025-65945\nCVE-2025-66031\nCVE-2025-66418\nCVE-2025-66471\nCVE-2025-66490\nCVE-2026-21441\nCVE-2026-22029\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"021dc620-c572-3fed-897c-5b6bac78fe8c","product":{"name":"registry.redhat.io/devspaces/configbump-rhel9@sha256:8608f41d9887eb5fea9df4b9c273fea3512c3ad492bbf8e542e6369db15be680_arm64","vendor":{"name":"Red Hat"}}},{"id":"05013715-63e0-3574-bcc9-f2ef2e1ffa47","product":{"name":"registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:4c5121d8f31d840f55e575bf266f2ca179a81f05dd49fbd63a4ee7e3f8a97001_amd64","vendor":{"name":"Red Hat"}}},{"id":"05a3143e-9042-3c41-a740-0608e4b26d9a","product":{"name":"registry.redhat.io/devspaces/openvsx-rhel9@sha256:ffe5740d684ac4a1b6c440bb4d2ca3ec20d71c008e65fa73f5143c43a7bda339_s390x","vendor":{"name":"Red Hat"}}},{"id":"09d90768-024d-3187-ac8c-0214872e30cc","product":{"name":"registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fd35a91b2542252bcd695cd7d02727e8a1c593f1c9a9ec88da92d5d797b17bc5_amd64","vendor":{"name":"Red Hat"}}},{"id":"0b1484a0-fbd9-3fe6-89c1-6761fae60706","product":{"name":"registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:870546a61219ce727b59586e31edb8cbc653ce72264b23a89a916d04a0627fe0_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"1074df64-6693-37ba-980f-c6cce4baf95b","product":{"name":"registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:bc68ad64665acf9c4807bb4f4ae920da7c2a82716c8bc151bd269a4f234fc69e_arm64","vendor":{"name":"Red Hat"}}},{"id":"10a95e00-94ae-306b-aa5a-b03e59ccdcd2","product":{"name":"registry.redhat.io/devspaces/udi-base-rhel10@sha256:cc2df284c22698278472a3cb0b748b797097bacf72e24a13f98c8cd9643452d1_amd64","vendor":{"name":"Red Hat"}}},{"id":"13932263-51b6-365c-a98c-cac3f7ede5ab","product":{"name":"registry.redhat.io/devspaces/server-rhel9@sha256:60460d63a971f7f129f97f1d73f8f577565d82a5f8d476e19b249b6e543dee0b_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"179cfcf3-986d-31db-8e64-60454191686b","product":{"name":"registry.redhat.io/devspaces/udi-base-rhel10@sha256:7335ec3e28a4f9e88f03df6ad4b245f6ffc3e0b79aa1c5072f5cf27bbd0dbb17_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"1b3171eb-413a-32f1-a535-ed0d0c406ee6","product":{"name":"registry.redhat.io/devspaces/machineexec-rhel9@sha256:c06a36be7e7392da6fcdbdbf79bf704852be05ac7bc094cc63355180b05ed9ba_arm64","vendor":{"name":"Red Hat"}}},{"id":"1e893198-a275-3f2f-a12a-10db7ef19d7b","product":{"name":"registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fd2925764c63cf6ee7cb92dab59cc8f6f696f628e4676b37297dab95aa0187f1_s390x","vendor":{"name":"Red Hat"}}},{"id":"26a07fb5-fb51-3a3e-9f04-0805b5fd6adb","product":{"name":"registry.redhat.io/devspaces/traefik-rhel9@sha256:0f0dbdab221c9ea50603b8a48ed61b2e322dc4dc03028611bcb120ea7bc32a81_s390x","vendor":{"name":"Red Hat"}}},{"id":"2efa745c-65b5-3c45-9399-793c440e4f15","product":{"name":"registry.redhat.io/devspaces/machineexec-rhel9@sha256:be63fdd87b11d550dbd8cef2b74cbf843ed778365d877684e8525c9b017f3a50_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"362ff2f5-7f7f-3ccb-9a88-05be1f1e0d38","product":{"name":"registry.redhat.io/devspaces/traefik-rhel9@sha256:3f001b01ff331475bc37556515ecab11699f54560d33caa8f45e84cb8ff91410_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"41706f15-716a-36e4-bff3-2573d9b0646d","product":{"name":"registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:c72b135ccb51663313a9ed55dc5d46af1fbc2476c0243a523ce531262cb82acf_amd64","vendor":{"name":"Red Hat"}}},{"id":"4b2f4441-9714-37f1-a954-19df82333610","product":{"name":"registry.redhat.io/devspaces/configbump-rhel9@sha256:1a4accefcf3c48a44818e9126cdb893d469c93b2f058ce3cff6195d823d9e6c5_s390x","vendor":{"name":"Red Hat"}}},{"id":"557bb83e-0758-3e3d-8240-a3c22e1adc05","product":{"name":"registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b8ae475ea425efb5d30d2c23cd789ee993ee7e5026ed5c892106512351aee416_arm64","vendor":{"name":"Red Hat"}}},{"id":"569d3979-531c-38eb-8b36-9250cf73d74b","product":{"name":"registry.redhat.io/devspaces/code-rhel9@sha256:60a1c1cf2a755e24203ae76e37c3e1c08f97ae8a1905df3538b31f7d9b543f0f_s390x","vendor":{"name":"Red Hat"}}},{"id":"56f95cc8-64b5-3f89-b7e4-1a3bd63b9ff8","product":{"name":"registry.redhat.io/devspaces/openvsx-rhel9@sha256:b709ca92a102d77f8a090e1503877e12dc24bbd6e91c0205d8402ad3a9c365e9_amd64","vendor":{"name":"Red Hat"}}},{"id":"59e809a1-95b4-3cd9-ba70-2b3820fbb385","product":{"name":"registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e2c1df1a1bc028158873b636f8b0341090b7f5211d74d0143c39b3b1f9d36472_arm64","vendor":{"name":"Red Hat"}}},{"id":"5da39686-d242-3e56-bc67-ecb0a1f9116e","product":{"name":"registry.redhat.io/devspaces/udi-base-rhel9@sha256:b998742f17f56c16942062d11d4f7f62181703f4be20db6fa807a35d016cd7da_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"5ff08b65-bb37-3166-b179-48a2aa2b46b1","product":{"name":"registry.redhat.io/devspaces/traefik-rhel9@sha256:8d7f9a00fd74530f30b15e62db3d3c7096a04a6e68e28ca1ba04eae538034f93_arm64","vendor":{"name":"Red Hat"}}},{"id":"620da975-d04f-3777-b28a-c4d46c3059c9","product":{"name":"registry.redhat.io/devspaces/imagepuller-rhel9@sha256:0f87d0637586a8d1aedb84b266f9781af80f63c1342b3951559aa18343825993_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"65bb3a27-d19a-3ed8-9825-db3ca4781e4c","product":{"name":"registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:bc60ec1ad66c342f632d32a64012cae3c4426f54bf08578d60d25a68c31b02cd_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"6dcf55cd-aaaf-31ba-ad33-a154ae5cfc2e","product":{"name":"registry.redhat.io/devspaces/dashboard-rhel9@sha256:ba7fc29722ef40b1565978c1f578786ccb65752bc82f50b794f3c5ab0c789d2a_amd64","vendor":{"name":"Red Hat"}}},{"id":"6e8f15c3-b06c-3f92-bfd5-782cbcfe9c44","product":{"name":"registry.redhat.io/devspaces/udi-rhel9@sha256:b520d66efc293127d9f0478eff66e2ddc6830f3b7d6ced0abe931792022a3f70_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"70adbfbc-6a15-358f-a82a-036dda6d51ac","product":{"name":"registry.redhat.io/devspaces/code-sshd-rhel9@sha256:eaf02961dff765751f8b0f14dbc928401faa0fa60c0ee0bf340ed814509794fc_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"7872023d-0af4-3ac6-bdf6-5c07d7fc03cc","product":{"name":"registry.redhat.io/devspaces/configbump-rhel9@sha256:e0e7e2242127555100372896dee91fb69dd1a2fdbcce8473a1c343fc6b0b838d_amd64","vendor":{"name":"Red Hat"}}},{"id":"7b76b1b4-7874-3738-97af-7998d15d4ed0","product":{"name":"registry.redhat.io/devspaces/imagepuller-rhel9@sha256:43368b4815eea7a9b1b6a33b061af43f521810efc1c102df0426796e431d0add_arm64","vendor":{"name":"Red Hat"}}},{"id":"7f38e2e8-579d-3be5-815f-343de4ddc987","product":{"name":"registry.redhat.io/devspaces/code-rhel9@sha256:aa1d96a9c1d9dbf2fe077748807de1e047a17a942a87688c269aa60537b5c6d4_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"805cca02-59f8-3c26-92c4-ce76327ba640","product":{"name":"registry.redhat.io/devspaces/udi-rhel9@sha256:da6e70b4d7cf45da59e36c7741f532d9bfed498a00082560a34491419016c437_arm64","vendor":{"name":"Red Hat"}}},{"id":"8602e28b-448e-3c7e-a2d4-a8ae12190b89","product":{"name":"registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:55e7a74a6e435a77cbdeee2d8d333f830d47c52449a27770310f010c4c4c6dd1_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"86198870-6f79-3312-a8e4-4c31105ad81e","product":{"name":"registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2efc89cc392a8fdb0d2a493aa7cb0d5a6e3cc5efe19054181befe452f293ea59_amd64","vendor":{"name":"Red Hat"}}},{"id":"86d1f12d-6b84-30f5-9630-18a132559ac1","product":{"name":"registry.redhat.io/devspaces/dashboard-rhel9@sha256:998779815c5a7888b80f635b942a7409733a839f4c7253a7b5ff920129f987ea_arm64","vendor":{"name":"Red Hat"}}},{"id":"8f9c00af-83df-33f7-8565-be6e6287e316","product":{"name":"registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4e83ac026653a09abe7f783844617502298f45d4f12cb46445ad8d27722eed42_amd64","vendor":{"name":"Red Hat"}}},{"id":"94a6fc34-79e3-3657-82ce-a46cba050713","product":{"name":"registry.redhat.io/devspaces/udi-base-rhel9@sha256:276782b304e7f31d1e846f6acc5caeda45055adb8630d1605ad4ec55431ef6ec_s390x","vendor":{"name":"Red Hat"}}},{"id":"9592ffdd-0d44-375e-a44c-edf42349df6f","product":{"name":"registry.redhat.io/devspaces/udi-base-rhel9@sha256:cc54713d9a3f0a44403d9c8d13ae1f9179e2af96b144366b6ae7e753dab4ce70_amd64","vendor":{"name":"Red Hat"}}},{"id":"96c52094-865e-3699-8d7c-9b76f91b91e7","product":{"name":"registry.redhat.io/devspaces/machineexec-rhel9@sha256:5295d0aa61988b2722c9171a0c0f7a61e749479979746355861d0c8b6c2b58a8_s390x","vendor":{"name":"Red Hat"}}},{"id":"99b7e309-ab3d-3471-bfdf-833825a68cfe","product":{"name":"registry.redhat.io/devspaces/udi-rhel9@sha256:2966ebf5a1744c8bebae6c03efc4685aa8db9de84138fe95a63ad721a42ae06a_amd64","vendor":{"name":"Red Hat"}}},{"id":"9abb5049-4f08-308f-b12b-35bd6070b63d","product":{"name":"registry.redhat.io/devspaces/server-rhel9@sha256:4983729652072e885f84298af878c72f757bfb1e820dbb9ee4ad2494a6bd0f48_arm64","vendor":{"name":"Red Hat"}}},{"id":"9ef97420-e202-3aec-8973-c248277d23c4","product":{"name":"registry.redhat.io/devspaces/code-sshd-rhel9@sha256:c4339b180ab8f5fc5ea656c6d604ad1342e329557be4fe83f7747e7b30327908_s390x","vendor":{"name":"Red Hat"}}},{"id":"a1e2ba3c-c2ef-31e1-8bb7-06616fd22d86","product":{"name":"registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:819f3c80c8241446239d783d01e9a65e3448427a683dbaa5b91ba859329cdbd2_arm64","vendor":{"name":"Red Hat"}}},{"id":"a5260ee2-b9eb-3eb6-a1aa-0c477719feed","product":{"name":"registry.redhat.io/devspaces/traefik-rhel9@sha256:e8da554ed086a4ac5fcbe6ad7797f1f36c965aae3bbb75c2fd446b9dfa1d5592_amd64","vendor":{"name":"Red Hat"}}},{"id":"ac2cc76d-620c-3a6b-8a72-085733e9b061","product":{"name":"registry.redhat.io/devspaces/configbump-rhel9@sha256:f818d47a01fd77940943b79133d1c7bf053359c72832e0df61397847af43f6e7_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"b361d6b4-49c0-3dfb-98d5-883cd5291a49","product":{"name":"registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6a70faa18a51c05328cba689acd2cef1f248ba4d9f78802f3bdc4aff4183d521_s390x","vendor":{"name":"Red Hat"}}},{"id":"b4a06f05-ae7c-362a-8984-2d2aeae407fb","product":{"name":"registry.redhat.io/devspaces/openvsx-rhel9@sha256:024f64869d4813d8b0938f8cad9a0bf4e4e924a5082ac2ee3ea0bc6ba51edfe5_arm64","vendor":{"name":"Red Hat"}}},{"id":"ba9b50c9-5c41-33fa-ac01-a8c5838ddaca","product":{"name":"registry.redhat.io/devspaces/udi-base-rhel9@sha256:10da53d4e0216c034f57c990d1569c25558f68e65b7fc07e18b3e6be89490162_arm64","vendor":{"name":"Red Hat"}}},{"id":"baf53dbb-9c4c-36c3-98ec-b49b8024e764","product":{"name":"registry.redhat.io/devspaces/openvsx-rhel9@sha256:de30783c5550d7dc3ebd71507ce41e4a6f6209663299453aaf35b73f17d161d8_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"c320bcbf-9405-3c3c-b8f7-f06772d13c68","product":{"name":"registry.redhat.io/devspaces/code-rhel9@sha256:a85afca6643f11c1e0d3976d5e679cea06d85675a5859e7e08611139f2450520_arm64","vendor":{"name":"Red Hat"}}},{"id":"c55fd6d3-7411-39a7-bb90-103c08afad1c","product":{"name":"registry.redhat.io/devspaces/imagepuller-rhel9@sha256:454566dfa4c035a67f5e4d5ed19289d1c97f2546ee06ef587aff36b3f2cdadee_s390x","vendor":{"name":"Red Hat"}}},{"id":"cedd3506-5c22-313a-9f65-c9d31b4d811a","product":{"name":"registry.redhat.io/devspaces/udi-base-rhel10@sha256:b4770ac4b68c340a5efa523751761b725ddfb38d25cf129e2a978f6e3774e7c2_arm64","vendor":{"name":"Red Hat"}}},{"id":"cfbf0e96-27c9-3382-8f39-a3759bb1fd61","product":{"name":"registry.redhat.io/devspaces/code-rhel9@sha256:772af8d40b674ce306850d3ecf2b70b39bdceaf9e045a2db9299c0dd8bd5e6b5_amd64","vendor":{"name":"Red Hat"}}},{"id":"d625c570-c8fa-3e7c-bb0b-d035900cc5c3","product":{"name":"registry.redhat.io/devspaces/dashboard-rhel9@sha256:7705755155844d580db7d2ce942bb095545f465be7a091bc14598f5ae83c0301_s390x","vendor":{"name":"Red Hat"}}},{"id":"d943bc0a-5022-31cd-89be-a81b8255b70a","product":{"name":"registry.redhat.io/devspaces/dashboard-rhel9@sha256:65b57a43496e012535680c5f6758bf4e482f0496619c1502b50cb4852723088e_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"d9a4d4fb-ebb4-3edb-a6c5-beb3a6ab8d89","product":{"name":"registry.redhat.io/devspaces/udi-base-rhel10@sha256:a05ebcc4507fd1c7d47254f6dc9b94a7fd1c0868f17e51cfe6e310f763e9baba_s390x","vendor":{"name":"Red Hat"}}},{"id":"de005cea-3276-3f80-b113-12bf6b80f601","product":{"name":"registry.redhat.io/devspaces/server-rhel9@sha256:377caaaff59c843357600332c63278fa019eacec2a60567725dd149e98d6d3fb_s390x","vendor":{"name":"Red Hat"}}},{"id":"df656217-0fc7-30cd-ba18-5e88027efce1","product":{"name":"registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:8935901859ad9b07689de3d9ea602adf21bcbd2105cedba83503296230b4adad_s390x","vendor":{"name":"Red Hat"}}},{"id":"ecf5b944-1e22-3bcb-a222-a4a1185efa90","product":{"name":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26","vendor":{"name":"Red Hat"}}},{"id":"f1f7acff-c786-3e32-a6e7-84092e5d8f39","product":{"name":"registry.redhat.io/devspaces/udi-rhel9@sha256:f592ddd74feb260b51087e6555b6e7e42e61dc12a87475e3aa3b7729e33fcf93_s390x","vendor":{"name":"Red Hat"}}},{"id":"f8272f82-1e65-3c3f-9ebf-88ed4a04330d","product":{"name":"registry.redhat.io/devspaces/machineexec-rhel9@sha256:65d7c3ada0b4c4fdfb576f5fbbc8b75264c26a4baabdbbaf2197e05186b6bdd1_amd64","vendor":{"name":"Red Hat"}}},{"id":"fc85111e-d719-35af-a175-f060104e3dc9","product":{"name":"registry.redhat.io/devspaces/server-rhel9@sha256:1a1e372643b7eeabd4acda8b440173ef83087b453a89f554b4c1c006c7a796c8_amd64","vendor":{"name":"Red Hat"}}},{"id":"fcd6a4ec-f609-3cbd-8380-461872025e68","product":{"name":"registry.redhat.io/devspaces/code-sshd-rhel9@sha256:51c627941a630d042202df9fbb0be4c289c3c2b4047092d350f564ea9815c55e_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"97e88892-2cfc-35f1-9333-f17ebaacf235","advisory":{"id":"openSUSE-SU-2026:10143-1","description":"traefik2-2.11.35-1.1 on GA media","summary":"traefik2-2.11.35-1.1 on GA media","datePublished":"Feb 3, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 4:52:40 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10143-1.json\nhttps://www.suse.com/security/cve/CVE-2025-54386/\nhttps://www.suse.com/security/cve/CVE-2025-58181/\nhttps://www.suse.com/security/cve/CVE-2025-66490/\nhttps://www.suse.com/security/cve/CVE-2026-22045/\n","aliases":"CVE-2025-54386\nCVE-2025-58181\nCVE-2025-66490\nCVE-2026-22045\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"2a689831-27b6-3010-b204-535516d5c8b0","product":{"name":"traefik2-2.11.35-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"38d8a1de-8d68-32c3-8849-400000a27e5d","product":{"name":"traefik2-2.11.35-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4e8e8c48-4a65-3127-86be-1a10d5d9d7a8","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"5ad0cbba-23b6-371c-b3c7-a3f7b4d6a246","product":{"name":"traefik2-0:2.11.35-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"65714f16-eff7-3baf-bb02-0f2b3d9df99b","product":{"name":"traefik2-2.11.35-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"78588b13-17d4-3d9b-b619-79c205b78854","product":{"name":"traefik2-0:2.11.35-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"84d8779a-6433-3a1d-b162-6175f6cdb4bf","product":{"name":"traefik2-0:2.11.35-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"d26384ba-55c4-3c95-b31d-6bf6e67867ac","product":{"name":"traefik2-0:2.11.35-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"fca8869d-27f3-3eb8-8dd2-1d0d56144e4a","product":{"name":"traefik2-2.11.35-1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"9bb6aba2-a201-344f-a33e-c885016deddc","advisory":{"id":"openSUSE-SU-2026:10020-1","description":"traefik-3.6.6-1.1 on GA media","summary":"traefik-3.6.6-1.1 on GA media","datePublished":"Jan 8, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 4:50:09 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10020-1.json\nhttps://www.suse.com/security/cve/CVE-2025-66490/\nhttps://www.suse.com/security/cve/CVE-2025-66491/\n","aliases":"CVE-2025-66490\nCVE-2025-66491\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"059905e3-e965-3473-b60e-e4f9e451541a","product":{"name":"traefik-0:3.6.6-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"0b00b0df-a2ed-3886-b1a7-12fa6beddcd0","product":{"name":"traefik-0:3.6.6-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"39c5472e-be6a-383c-a201-0dfa7b6a687d","product":{"name":"traefik-0:3.6.6-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"528703f5-c195-37de-96dd-0baf2022eeb4","product":{"name":"traefik-3.6.6-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"6ff2ac51-22db-3c4c-bc7d-32c2078a57d6","product":{"name":"traefik-3.6.6-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a8001a04-5be0-37dd-8484-f696f9bbcf54","product":{"name":"traefik-0:3.6.6-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"dacadb99-8c28-3f38-a9cd-eca44fdb2192","product":{"name":"traefik-3.6.6-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f98d5bc4-fcc4-3e1b-975f-bd823a929bdd","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"fe82c38f-1b45-3928-9c5c-8e40fa3a2568","product":{"name":"traefik-3.6.6-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}}]}