v2.11.57
alibaba/MNNv2.11.57Sep 4, 2026by github-actions[bot]
Upgrading?
AI Summary
A maintenance release for the v2.11 branch addressing specific security vulnerabilities and improving request handling for ACME, HTTP/3, and server configurations.
Key Highlights
- Fixed CVEs (GHSA-qqjf, GHSA-f52w, GHSA-w4v4)
- Disabled recursive nss propagation by default for DNS challenge
- Dedicated a transport per HTTP/3 client connection
- Denied requests with opaque request targets
Full Release Notes
**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v2.11/migration/v2/#v21157). **CVE fixed:** - Advisory [GHSA-qqjf-53cj-pwvv](https://github.com/traefik/traefik/security/advisories/GHSA-qqjf-53cj-pwvv) - Advisory [GHSA-f52w-8j3h-j724](https://github.com/traefik/traefik/security/advisories/GHSA-f52w-8j3h-j724) - Advisory [GHSA-w4v4-9rw7-5326](https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326) **Bug fixes:** - **[acme]** Disable recursive nss propagation by default for DNS challenge ([#13830](https://github.com/traefik/traefik/pull/13830) @rtribotte) - **[http3]** Dedicate a transport per HTTP/3 client connection ([#13812](https://github.com/traefik/traefik/pull/13812) @sdelicata) - **[server]** Deny request with an opaque request target ([#13796](https://github.com/traefik/traefik/pull/13796) @sdelicata) - **[server]** Do not forward h2c upgrade headers to the backend ([#13797](https://github.com/traefik/traefik/pull/13797) @sdelicata)
Related Repositories
ggml-org/llama.cpp★ 131,952
LLM inference in C/C++
LadybirdBrowser/ladybird★ 66,607
Truly independent web browser
ClickHouse/ClickHouse★ 50,532
ClickHouse® is a real-time analytics database management system
LizardByte/Sunshine★ 42,491
Self-hosted game stream host for Moonlight.
deskflow/deskflow★ 29,983
Share a single keyboard and mouse between multiple computers.