v2.11.57
fastrepl/anarlogv2.11.57Sep 4, 2026by github-actions[bot]
Upgrading?
AI Summary
A maintenance release fixing the same security vulnerabilities found in the v3.7.13 release, focusing on ACME and server security.
Key Highlights
- Fixes 3 CVEs (GHSA-qqjf-53cj-pwvv, GHSA-f52w-8j3h-j724, GHSA-w4v4-9rw7-5326)
- Disables recursive nss propagation for DNS challenge
- Dedicates a transport per HTTP/3 client connection
- Denies requests with opaque request targets
Full Release Notes
**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v2.11/migration/v2/#v21157). **CVE fixed:** - Advisory [GHSA-qqjf-53cj-pwvv](https://github.com/traefik/traefik/security/advisories/GHSA-qqjf-53cj-pwvv) - Advisory [GHSA-f52w-8j3h-j724](https://github.com/traefik/traefik/security/advisories/GHSA-f52w-8j3h-j724) - Advisory [GHSA-w4v4-9rw7-5326](https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326) **Bug fixes:** - **[acme]** Disable recursive nss propagation by default for DNS challenge ([#13830](https://github.com/traefik/traefik/pull/13830) @rtribotte) - **[http3]** Dedicate a transport per HTTP/3 client connection ([#13812](https://github.com/traefik/traefik/pull/13812) @sdelicata) - **[server]** Deny request with an opaque request target ([#13796](https://github.com/traefik/traefik/pull/13796) @sdelicata) - **[server]** Do not forward h2c upgrade headers to the backend ([#13797](https://github.com/traefik/traefik/pull/13797) @sdelicata)
Related Repositories
A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode, OpenClaw, Grok Build & Hermes Agent. Only official website: ccswitch.io
An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.
Build smaller, faster, and more secure desktop and mobile applications with a web frontend.
π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one