Starstruk Logo MarkStarstruk

v2.11.57

getarcaneapp/arcanev2.11.57Sep 4, 2026by github-actions[bot]

Upgrading?

What changed from v2026.9.3.0 → v2.11.57?What's new in v3.7.13 after v2.11.57?

AI Summary

A security patch release for Traefik v2.11 fixing specific CVEs and providing minor bug fixes related to DNS challenges, HTTP/3 timeouts, and request handling.

Key Highlights

  • Fixes multiple security advisories
  • Disables recursive NSS propagation for DNS challenge by default
  • Fixes HTTP/3 timeouts and header bytes
  • Adds denial for opaque request targets
  • Respects existing contents when choosing download locations

New Features

  • DNS challenge propagation improvements
  • HTTP/3 timeout configurations
  • Request validation and header forwarding fixes

Full Release Notes

**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v2.11/migration/v2/#v21157).

**CVE fixed:**
- Advisory [GHSA-qqjf-53cj-pwvv](https://github.com/traefik/traefik/security/advisories/GHSA-qqjf-53cj-pwvv)
- Advisory [GHSA-f52w-8j3h-j724](https://github.com/traefik/traefik/security/advisories/GHSA-f52w-8j3h-j724)
- Advisory [GHSA-w4v4-9rw7-5326](https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326)

**Bug fixes:**
- **[acme]** Disable recursive nss propagation by default for DNS challenge ([#13830](https://github.com/traefik/traefik/pull/13830) @rtribotte)
- **[http3]** Dedicate a transport per HTTP/3 client connection ([#13812](https://github.com/traefik/traefik/pull/13812) @sdelicata)
- **[server]** Deny request with an opaque request target ([#13796](https://github.com/traefik/traefik/pull/13796) @sdelicata)
- **[server]** Do not forward h2c upgrade headers to the backend ([#13797](https://github.com/traefik/traefik/pull/13797) @sdelicata)

Related Repositories

ollama/ollama★ 184,232

Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

fatedier/frp★ 110,062

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

infiniflow/ragflow★ 92,630

RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs

gohugoio/hugo★ 90,198

The world’s fastest framework for building websites.

junegunn/fzf★ 83,715

:cherry_blossom: A command-line fuzzy finder