Starstruk Logo MarkStarstruk

v2.11.52

rolldown/rolldownv2.11.52Jul 8, 2026by github-actions[bot]

AI Summary

This release contains a single security fix and updates for ACME and OpenTelemetry dependencies.

Key Highlights

  • Fixed one CVE: GHSA-cxjq-mrr5-89rv
  • Sanitized replaced path in ReplacePathRegex middleware
  • Bumped go-pkcs12 to v0.7.3
  • Bumped go.opentelemetry.io/otel to v1.44.0

Full Release Notes

**CVE fixed:**
- Advisory [GHSA-cxjq-mrr5-89rv](https://github.com/traefik/traefik/security/advisories/GHSA-cxjq-mrr5-89rv)

**Bug fixes:**
- **[middleware]** Sanitize replaced path in ReplacePathRegex middleware ([#13466](https://github.com/traefik/traefik/pull/13466) @kevinpollet)
- **[acme]** Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ([#13477](https://github.com/traefik/traefik/pull/13477) @rtribotte)
- **[otel]** Bump go.opentelemetry.io/otel to v1.44.0 ([#13478](https://github.com/traefik/traefik/pull/13478) @rtribotte)

**Documentation:**
- Fix changelog v2.11.51 ([#13430](https://github.com/traefik/traefik/pull/13430) @mmatur)