v2.11.57
NodePassProject/Anywherev2.11.57Sep 4, 2026by github-actions[bot]
Upgrading?
AI Summary
Addresses specific security vulnerabilities and applies security fixes found in the v3.x series, including improved HTTP/3 handling and server-side request validation.
Key Highlights
- Fixes 3 CVEs
- Disables recursive NSS propagation for DNS challenge
- Dedicates a transport per HTTP/3 client connection
- Improves server security by denying opaque request targets and not forwarding h2c upgrade headers
New Features
- Deny requests with opaque request targets
- Do not forward h2c upgrade headers to the backend
- Disable recursive nss propagation by default for DNS challenge
Full Release Notes
**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v2.11/migration/v2/#v21157). **CVE fixed:** - Advisory [GHSA-qqjf-53cj-pwvv](https://github.com/traefik/traefik/security/advisories/GHSA-qqjf-53cj-pwvv) - Advisory [GHSA-f52w-8j3h-j724](https://github.com/traefik/traefik/security/advisories/GHSA-f52w-8j3h-j724) - Advisory [GHSA-w4v4-9rw7-5326](https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326) **Bug fixes:** - **[acme]** Disable recursive nss propagation by default for DNS challenge ([#13830](https://github.com/traefik/traefik/pull/13830) @rtribotte) - **[http3]** Dedicate a transport per HTTP/3 client connection ([#13812](https://github.com/traefik/traefik/pull/13812) @sdelicata) - **[server]** Deny request with an opaque request target ([#13796](https://github.com/traefik/traefik/pull/13796) @sdelicata) - **[server]** Do not forward h2c upgrade headers to the backend ([#13797](https://github.com/traefik/traefik/pull/13797) @sdelicata)
Related Repositories
A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.
Lightning-Fast, On-Device, Multilingual TTS — running natively via ONNX.
Fastest and only macOS Dictation app with on-device STT and custom trained AI enhancement model. Windows, iOS testflight! Android, Linux waitlist open! A local Wispr Flow alternative. Follow https://x.com/fluidvoiceapp for more
High performance distributed S3 compatible object storage focused on speed and designed to be an open alternative to MinIO and RustFS.
73 MB open source ScreenStudio alternative. Tiny, powerful with incredible performance. Native Swift app.