v3.7.7
facebookresearch/omnilingual-asrv3.7.7Jul 8, 2026by github-actions[bot]
AI Summary
A critical update that fixes multiple CVEs and introduces the app-root middleware for nginx. It also resolves various Kubernetes and middleware bugs, including consistency issues between HostSNI and Host rules, and endpoint slice handling.
Key Highlights
- Fixed multiple CVEs (GHSA-cxjq-mrr5-89rv, GHSA-42cj-m3vj-89wv, GHSA-qq9q-x9w4-chhj)
- Added app-root middleware with nginx variable interpolation
- Fixed consistency between HostSNI(*) and Host(*) rules
- Fixed ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace
- Sanitized replaced path in ReplacePathRegex middleware
New Features
- App-root middleware with nginx variable interpolation
- Fixed HostSNI/Host rule consistency
- Fixed ExtensionRef filters for backendRefs
- Sanitized path in ReplacePathRegex middleware
- Updated ACME library and OpenTelemetry library
Full Release Notes
**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.7/migrate/v3/#v377). **CVE fixed:** - Advisory [GHSA-cxjq-mrr5-89rv](https://github.com/traefik/traefik/security/advisories/GHSA-cxjq-mrr5-89rv) - Advisory [GHSA-42cj-m3vj-89wv](https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv) - Advisory [GHSA-qq9q-x9w4-chhj](https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj) **Bug fixes:** - **[middleware, k8s/ingress-nginx]** Add app-root middleware with nginx variable interpolation ([#13398](https://github.com/traefik/traefik/pull/13398) @dfeinblatt) - **[rules]** Fix consistency between HostSNI(*) and Host(*) ([#13460](https://github.com/traefik/traefik/pull/13460) @juliens) - **[k8s, k8s/gatewayapi]** Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace ([#13462](https://github.com/traefik/traefik/pull/13462) @gndz07) - **[middleware]** Fix handle empty unknown-length bodies in mirroring ([#13399](https://github.com/traefik/traefik/pull/13399) @amazon7737) - **[k8s/crd]** Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider ([#13458](https://github.com/traefik/traefik/pull/13458) @gndz07) - **[middleware]** Sanitize replaced path in ReplacePathRegex middleware ([#13466](https://github.com/traefik/traefik/pull/13466) @kevinpollet) - **[acme]** Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ([#13477](https://github.com/traefik/traefik/pull/13477) @rtribotte) - **[otel]** Bump go.opentelemetry.io/otel to v1.44.0 ([#13478](https://github.com/traefik/traefik/pull/13478) @rtribotte) - **[k8s]** Fix panic when endpointslice port value or name is nil ([#13481](https://github.com/traefik/traefik/pull/13481) @kevinpollet) **Documentation:** - Fix version in migration guide ([#13434](https://github.com/traefik/traefik/pull/13434) @kevinpollet) - Fix changelog v2.11.51 ([#13430](https://github.com/traefik/traefik/pull/13430) @mmatur) - Add v3.7 to supported version docs ([#13118](https://github.com/traefik/traefik/pull/13118) @jnoordsij) - Fix some function names in comments ([#13443](https://github.com/traefik/traefik/pull/13443) @blackflytech) - Add @nandorKollar as a current maintainer ([#13451](https://github.com/traefik/traefik/pull/13451) @emilevauge) - Add @amazon7737 as a current maintainer ([#13450](https://github.com/traefik/traefik/pull/13450) @emilevauge) - **[middleware]** Clarify buffering middleware defaults ([#13401](https://github.com/traefik/traefik/pull/13401) @amazon7737) - Fix grammar in TLS, TCP service, and routing reference docs ([#13461](https://github.com/traefik/traefik/pull/13461) @almightymoon) - Fix X-Forwarded-Prefix documentation for dashboard redirection ([#13472](https://github.com/traefik/traefik/pull/13472) @kevinpollet)