x/vulndb: potential Go vuln in github.com/traefik/traefik: GHSA-4vwx-54mw-vqfw

[GoVulnBot]

In GitHub Security Advisory GHSA-4vwx-54mw-vqfw, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/traefik/traefik	2.11.2	<= 2.11.1

Cross references:

• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: CVE-2022-23632 #325 EFFECTIVELY_PRIVATE
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: GHSA-7h6j-2268-fhcm #808 NOT_IMPORTABLE
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: CVE-2021-32813, GHSA-m697-4v8f-55qg #923 NOT_IMPORTABLE
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: GHSA-7v4p-328v-8v5g #2117 DEPENDENT_VULNERABILITY
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: CVE-2023-47106 #2376 EFFECTIVELY_PRIVATE
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: CVE-2023-47633 #2377 EFFECTIVELY_PRIVATE

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/traefik/traefik
      versions:
        - introduced: TODO (earliest fixed "2.11.2", vuln range "<= 2.11.1")
      packages:
        - package: github.com/traefik/traefik
    - module: github.com/traefik/traefik
      versions:
        - introduced: TODO (earliest fixed "2.11.2", vuln range "<= 2.11.1")
      packages:
        - package: github.com/traefik/traefik/v2
    - module: github.com/traefik/traefik
      versions:
        - introduced: TODO (earliest fixed "3.0.0-rc5", vuln range ">= 3.0.0-beta3, <= 3.0.0-rc4")
      packages:
        - package: github.com/traefik/traefik/v3
summary: Traefik vulnerable to denial of service with Content-length header
cves:
    - CVE-2024-28869
ghsas:
    - GHSA-4vwx-54mw-vqfw
references:
    - advisory: https://github.com/traefik/traefik/security/advisories/GHSA-4vwx-54mw-vqfw
    - web: https://github.com/traefik/traefik/releases/tag/v2.11.2
    - web: https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5
    - advisory: https://github.com/advisories/GHSA-4vwx-54mw-vqfw

[gopherbot]

Change https://go.dev/cl/590278 mentions this issue: data/reports: add 48 unreviewed reports