Starstruk Logo MarkStarstruk

v3.6.23

QwenAudio/SenseVoicev3.6.23Jul 8, 2026by github-actions[bot]

AI Summary

A hotfix release for Traefik mirroring security fixes from v3.7.7 and resolving specific crashes in Kubernetes endpoint slice handling.

Key Highlights

  • Fixed security advisories (CVEs GHSA-cxjq-mrr5-89rv, GHSA-42cj-m3vj-89wv).
  • Fixed panic when endpointslice port value or name is nil.
  • Fixed cross-provider ref check for TCP ServersTransport in Kubernetes CRD.
  • Clarified buffering middleware defaults.

New Features

  • Endpointslice port/name nil panic fix
  • TCP ServersTransport ref check fix
  • Buffering middleware clarification

Full Release Notes

**CVE fixed:**
- Advisory [GHSA-cxjq-mrr5-89rv](https://github.com/traefik/traefik/security/advisories/GHSA-cxjq-mrr5-89rv)
- Advisory [GHSA-42cj-m3vj-89wv](https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv)

**Bug fixes:**
- **[acme]** Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ([#13477](https://github.com/traefik/traefik/pull/13477) @rtribotte)
- **[k8s]** Fix panic when endpointslice port value or name is nil ([#13481](https://github.com/traefik/traefik/pull/13481) @kevinpollet)
- **[k8s/crd]** Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider ([#13458](https://github.com/traefik/traefik/pull/13458) @gndz07)
- **[middleware]** Fix handle empty unknown-length bodies in mirroring ([#13399](https://github.com/traefik/traefik/pull/13399) @amazon7737)
- **[middleware]** Sanitize replaced path in ReplacePathRegex middleware ([#13466](https://github.com/traefik/traefik/pull/13466) @kevinpollet)
- **[otel]** Bump go.opentelemetry.io/otel to v1.44.0 ([#13478](https://github.com/traefik/traefik/pull/13478) @rtribotte)

**Documentation:**
- **[middleware]** Clarify buffering middleware defaults ([#13401](https://github.com/traefik/traefik/pull/13401) @amazon7737)
- Add @amazon7737 as a current maintainer ([#13450](https://github.com/traefik/traefik/pull/13450) @emilevauge)
- Add @nandorKollar as a current maintainer ([#13451](https://github.com/traefik/traefik/pull/13451) @emilevauge)
- Fix changelog v2.11.51 ([#13430](https://github.com/traefik/traefik/pull/13430) @mmatur)
- Fix grammar in TLS, TCP service, and routing reference docs ([#13461](https://github.com/traefik/traefik/pull/13461) @almightymoon)
- Fix some function names in comments ([#13443](https://github.com/traefik/traefik/pull/13443) @blackflytech)
- Fix version in migration guide ([#13434](https://github.com/traefik/traefik/pull/13434) @kevinpollet)
- Fix X-Forwarded-Prefix documentation for dashboard redirection ([#13472](https://github.com/traefik/traefik/pull/13472) @kevinpollet)