漏洞公告

Traefik: ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false

Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing

Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool

Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass

Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion

Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validation

Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props

Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host

Nuxt: Unauthorized Component Instantiation via Server Island Props

Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients

Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)

Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering

rclone: Local Encoding Path Traversal

rclone archive extract allows S3 destination prefix escape via crafted archive paths

rclone: S3 backend does not strip X-Amz-Security-Token on a same-host HTTPS->HTTP redirect

rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories

rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution

rclone: WebDAV Credentials Survive a Same-Host HTTPS-to-HTTP Redirect

rclone: FTP Command Arguments Permit CRLF Injection When Custom Encoding Preserves Newlines

rclone: S3 Redirect Sanitization Omits IBM IAM Bearer Tokens and SSE-C Keys

rclone: Path traversal in serve s3 allows reading and overwriting root-level files

rclone: Infinite Scale TUS Creation Transport Error Causes a Nil-Response Panic