v3.7.8

QwenAudio/SenseVoicev3.7.8Jul 15, 2026by github-actions[bot]

AI Summary

Security patch for CVE and bug fixes for middleware, Kubernetes CRDs, and WebSocket handling.

Key Highlights

  • Fixed CVE GHSA-8rxv-jg7p-wvg3 security advisory
  • Added missing ErrorRequestHeaders field to CRDs
  • Fixed panic in retry middleware with Websockets
  • Sanitized rewritten target on ingress-nginx provider
  • Improved documentation for certificateRef and ports

Full Release Notes

**CVE fixed:**
- Advisory [GHSA-8rxv-jg7p-wvg3](https://github.com/traefik/traefik/security/advisories/GHSA-8rxv-jg7p-wvg3)

**Bug fixes:**
- **[middleware, k8s/crd]** Add missing ErrorRequestHeaders field to CRDs ([#13498](https://github.com/traefik/traefik/pull/13498) @kevinpollet)
- **[k8s/ingress-nginx]** Sanitize rewritten target on ingress-nginx provider ([#13506](https://github.com/traefik/traefik/pull/13506) @gndz07)
- **[logs]** Remove unrelated error from nonexistent cert resolver log ([#13469](https://github.com/traefik/traefik/pull/13469) @ArthurHlt)
- **[middleware]** Fix panic in retry middleware with Websockets ([#13520](https://github.com/traefik/traefik/pull/13520) @juliens)

**Documentation:**
- **[k8s]** Align certificateRef and indicate ports ([#13473](https://github.com/traefik/traefik/pull/13473) @veenoise)
- **[rules]** Fix syntax notes in routing rule documentation ([#13501](https://github.com/traefik/traefik/pull/13501) @stevenlele)
- **[k8s/crd]** Fix duplicated options table in ServersTransport CRD reference ([#13518](https://github.com/traefik/traefik/pull/13518) @rachana5)