Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-71326 · CVE overview and exploitation status

EUVD-2026-54297

GHSA-6765-c87h-8mrf

GO-2026-6204

cve-program · CVE-2026-71326

• https://github.com/traefik/traefik/security/advisories/GHSA-6765-c87h-8mrf
• https://github.com/traefik/traefik/pull/13572
• https://github.com/traefik/traefik/commit/b5ace8eb5d6779980567f5e75efd2d9e08b7e350
• https://github.com/traefik/traefik/releases/tag/v3.6.25
• https://github.com/traefik/traefik/releases/tag/v3.7.10

euvd · EUVD-2026-54297

• https://github.com/traefik/traefik/security/advisories/GHSA-6765-c87h-8mrf
• https://github.com/traefik/traefik/pull/13572
• https://github.com/traefik/traefik/commit/b5ace8eb5d6779980567f5e75efd2d9e08b7e350
• https://github.com/traefik/traefik/releases/tag/v3.6.25
• https://github.com/traefik/traefik/releases/tag/v3.7.10

nvd · CVE-2026-71326

• https://github.com/traefik/traefik/commit/b5ace8eb5d6779980567f5e75efd2d9e08b7e350
• https://github.com/traefik/traefik/pull/13572
• https://github.com/traefik/traefik/releases/tag/v3.6.25
• https://github.com/traefik/traefik/releases/tag/v3.7.10
• https://github.com/traefik/traefik/security/advisories/GHSA-6765-c87h-8mrf

osv · GHSA-6765-c87h-8mrf

• https://github.com/traefik/traefik/security/advisories/GHSA-6765-c87h-8mrf
• https://github.com/traefik/traefik/pull/13572
• https://github.com/traefik/traefik/commit/b5ace8eb5d6779980567f5e75efd2d9e08b7e350
• https://github.com/traefik/traefik
• https://github.com/traefik/traefik/releases/tag/v3.6.25
• https://github.com/traefik/traefik/releases/tag/v3.7.10

osv · GO-2026-6204

• https://github.com/traefik/traefik/security/advisories/GHSA-6765-c87h-8mrf
• https://github.com/traefik/traefik/commit/b5ace8eb5d6779980567f5e75efd2d9e08b7e350
• https://github.com/traefik/traefik/pull/13572
• https://github.com/traefik/traefik/releases/tag/v3.6.25
• https://github.com/traefik/traefik/releases/tag/v3.7.10

No related changes are available here.