From e275eb47a2dd364055acc6991d778503ebd7bf8a Mon Sep 17 00:00:00 2001
From: Rez Moss <hi@rezmoss.com>
Date: Fri, 28 Aug 2026 10:35:59 -0400
Subject: [PATCH] data/reports/GO-2026-5287.yaml: fix branch versions and
 symbols

---
 data/osv/GO-2026-5287.json     | 22 +++++++++++++++++-----
 data/reports/GO-2026-5287.yaml | 14 ++++++++------
 2 files changed, 25 insertions(+), 11 deletions(-)

diff --git a/data/osv/GO-2026-5287.json b/data/osv/GO-2026-5287.json
index b623cb8c..acecb673 100644
--- a/data/osv/GO-2026-5287.json
+++ b/data/osv/GO-2026-5287.json
@@ -40,7 +40,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "2.11.51"
+              "fixed": "2.11.48"
             }
           ]
         }
@@ -50,8 +50,7 @@
           {
             "path": "github.com/traefik/traefik/v2/pkg/server/router/tcp",
             "symbols": [
-              "Router.GetTLSGetClientInfo",
-              "Router.HTTP3TLSConfigMatcherFunc"
+              "Router.GetTLSGetClientInfo"
             ]
           }
         ]
@@ -69,6 +68,12 @@
             {
               "introduced": "0"
             },
+            {
+              "fixed": "3.6.19"
+            },
+            {
+              "introduced": "3.7.0"
+            },
             {
               "fixed": "3.7.3"
             }
@@ -80,8 +85,7 @@
           {
             "path": "github.com/traefik/traefik/v3/pkg/server/router/tcp",
             "symbols": [
-              "Router.GetTLSGetClientInfo",
-              "Router.HTTP3TLSConfigMatcherFunc"
+              "Router.GetTLSGetClientInfo"
             ]
           }
         ]
@@ -96,6 +100,14 @@
     {
       "type": "WEB",
       "url": "https://github.com/traefik/traefik/releases/tag/v3.7.3"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/traefik/traefik/pull/13214"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/traefik/traefik/releases/tag/v3.6.19"
     }
   ],
   "database_specific": {
diff --git a/data/reports/GO-2026-5287.yaml b/data/reports/GO-2026-5287.yaml
index 23722e5a..2702dca6 100644
--- a/data/reports/GO-2026-5287.yaml
+++ b/data/reports/GO-2026-5287.yaml
@@ -4,22 +4,22 @@ modules:
       vulnerable_at: 1.7.34
     - module: github.com/traefik/traefik/v2
       versions:
-        - fixed: 2.11.51
-      vulnerable_at: 2.11.50
+        - fixed: 2.11.48
+      vulnerable_at: 2.11.46
       packages:
         - package: github.com/traefik/traefik/v2/pkg/server/router/tcp
           symbols:
             - Router.GetTLSGetClientInfo
-            - Router.HTTP3TLSConfigMatcherFunc
     - module: github.com/traefik/traefik/v3
       versions:
-        - fixed: 3.7.3
-      vulnerable_at: 3.7.2
+        - fixed: 3.6.19
+        - introduced: 3.7.0
+          fixed: 3.7.3
+      vulnerable_at: 3.7.1
       packages:
         - package: github.com/traefik/traefik/v3/pkg/server/router/tcp
           symbols:
             - Router.GetTLSGetClientInfo
-            - Router.HTTP3TLSConfigMatcherFunc
 summary: |-
     Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and
     mixed-case hosts in github.com/traefik/traefik
@@ -40,6 +40,8 @@ ghsas:
 references:
     - advisory: https://github.com/traefik/traefik/security/advisories/GHSA-9cr8-q42q-g8m7
     - web: https://github.com/traefik/traefik/releases/tag/v3.7.3
+    - fix: https://github.com/traefik/traefik/pull/13214
+    - web: https://github.com/traefik/traefik/releases/tag/v3.6.19
 source:
     id: GHSA-9cr8-q42q-g8m7
     created: 2026-07-22T21:46:13.165616-04:00