{"id":"GO-2025-4205","revision":"3eb06018c6f041009d77cb7b09b4c945","records":[{"revision":"3eb06018c6f041009d77cb7b09b4c945","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4205","aliases":["CVE-2025-66491","GHSA-7vww-mvcr-x6vj"],"title":"Traefik Inverted TLS Verification Logic in ingress-nginx Provider in github.com/traefik/traefik","description":"Traefik Inverted TLS Verification Logic in ingress-nginx Provider in github.com/traefik/traefik","state":0,"publishedAt":"2025-12-15T19:37:35+00:00","modifiedAt":"2026-07-02T14:44:24.3997384+00:00","affected":[{"ecosystem":"Go","name":"github.com/traefik/traefik","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/traefik/traefik/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/traefik/traefik/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"3.5.0"},{"kind":"fixed","version":"3.6.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/traefik/traefik/security/advisories/GHSA-7vww-mvcr-x6vj","https://nvd.nist.gov/vuln/detail/CVE-2025-66491","https://github.com/traefik/traefik/commit/14a1aedf5704673d875d210d7bacf103a43c77e4","https://github.com/traefik/traefik/releases/tag/v3.6.3"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4205","license":"OSV · upstream source license applies","key":"osv:GO-2025-4205","identifiers":["GO-2025-4205","CVE-2025-66491","GHSA-7vww-mvcr-x6vj"]},"retained":false,"historicalAffected":[]}],"coverage":[]}