v2.11.57
ace-step/ACE-Step-1.5v2.11.57Sep 4, 2026by github-actions[bot]
Upgrading?
AI Summary
A security-focused update for the v2.11 branch that disables recursive NSS propagation and blocks opaque request targets.
Key Highlights
- Fixed 3 security advisories
- Disabled recursive nameserver propagation for DNS challenges
- Updated HTTP/3 and QUIC libraries to v0.62.0
- Blocked requests with opaque request targets
New Features
- Enhanced DNS challenge security
- Stricter request validation
Full Release Notes
**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v2.11/migration/v2/#v21157). **CVE fixed:** - Advisory [GHSA-qqjf-53cj-pwvv](https://github.com/traefik/traefik/security/advisories/GHSA-qqjf-53cj-pwvv) - Advisory [GHSA-f52w-8j3h-j724](https://github.com/traefik/traefik/security/advisories/GHSA-f52w-8j3h-j724) - Advisory [GHSA-w4v4-9rw7-5326](https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326) **Bug fixes:** - **[acme]** Disable recursive nss propagation by default for DNS challenge ([#13830](https://github.com/traefik/traefik/pull/13830) @rtribotte) - **[http3]** Dedicate a transport per HTTP/3 client connection ([#13812](https://github.com/traefik/traefik/pull/13812) @sdelicata) - **[server]** Deny request with an opaque request target ([#13796](https://github.com/traefik/traefik/pull/13796) @sdelicata) - **[server]** Do not forward h2c upgrade headers to the backend ([#13797](https://github.com/traefik/traefik/pull/13797) @sdelicata)
Related Repositories
public-apis/public-apis★ 491,128
A collective list of free APIs
NousResearch/hermes-agent★ 255,901
The agent that grows with you
yt-dlp/yt-dlp★ 200,002
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,481
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,700
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.