git: 57ae357cca8b - main - security/vuxml: Document vulnerabilities in net/traefik

The branch main has been updated by riggs:

URL: https://cgit.FreeBSD.org/ports/commit/?id=57ae357cca8b68b6e2ac529aa1889d7afc78ae05

commit 57ae357cca8b68b6e2ac529aa1889d7afc78ae05
Author:     Thomas Zander <riggs@FreeBSD.org>
AuthorDate: 2026-09-16 22:44:00 +0000
Commit:     Thomas Zander <riggs@FreeBSD.org>
CommitDate: 2026-09-16 22:45:14 +0000

    security/vuxml: Document vulnerabilities in net/traefik
---
 security/vuxml/vuln/2026.xml | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index 254c7a40de54..2afbeb7eae9f 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -1,3 +1,34 @@
+  <vuln vid="0627020f-b21c-11f1-bc39-5404a68ad561">
+    <topic>traefik -- Multiple vulnerabilities</topic>
+    <affects>
+      <package>
+      <name>traefik</name>
+      <range><lt>3.7.13</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+      <p>The traefik project releases a new version addressing multiple vulnerabilities:</p>
+      <blockquote cite="https://github.com/traefik/traefik/releases/tag/v3.7.13">
+      <ul>
+      <li>GHSA-qqjf-53cj-pwvv (HTTP/3 Backend NTLM Connection Reuse)</li>
+      <li>GHSA-f52w-8j3h-j724 (bypassing path-scoped routing)</li>
+      <li>GHSA-v67p-phpq-fc8x (entrypoint header-name sanitization bypass)</li>
+      <li>GHSA-w4v4-9rw7-5326 (HTTP Request/Response Smuggling)</li>
+      <li>GHSA-8fcf-v89g-xpg6 (unauthenticated username-enumeration timing oracle)</li>
+      </ul>
+      </blockquote>
+      </body>
+    </description>
+    <references>
+      <url>https://github.com/traefik/traefik/releases/tag/v3.7.13</url>
+    </references>
+    <dates>
+      <discovery>2026-09-04</discovery>
+      <entry>2026-09-16</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="a738c927-b216-11f1-bc39-5404a68ad561">
     <topic>mkvtoolnix -- Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound</topic>
     <affects>