v3.7.12
vanna-ai/vannav3.7.12Aug 26, 2026by github-actions[bot]
Upgrading?
AI Summary
Security and bug fix release addressing CVE vulnerabilities and improving HTTP/3 timeout handling.
Key Highlights
- CVE fixed for three security advisories (GHSA-cjr6-pf59-jq29, GHSA-7ghq-v6jf-g56c, GHSA-rf44-j88r-hh8c)
- Apply read timeout, idle timeout, and max header bytes for HTTP/3
- Include filename in file provider configuration errors
- Fix redirect www host with non-numeric port
- Fix TLS option collision across namespaces in ingress-nginx
Full Release Notes
**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.7/migrate/v3/#v3712). **CVE fixed:** - Advisory [GHSA-cjr6-pf59-jq29](https://github.com/traefik/traefik/security/advisories/GHSA-cjr6-pf59-jq29) - Advisory [GHSA-7ghq-v6jf-g56c](https://github.com/traefik/traefik/security/advisories/GHSA-7ghq-v6jf-g56c) - Advisory [GHSA-rf44-j88r-hh8c](https://github.com/traefik/traefik/security/advisories/GHSA-rf44-j88r-hh8c) **Bug fixes:** - **[fastproxy]** Bump github.com/valyala/fasthttp to v1.73.0 ([#13769](https://github.com/traefik/traefik/pull/13769) @mmatur) - **[file]** Include the filename in file provider configuration errors ([#13527](https://github.com/traefik/traefik/pull/13527) @lazerg) - **[http3]** Apply read timeout, idle timeout, and max header bytes for HTTP/3 ([#13717](https://github.com/traefik/traefik/pull/13717) @gndz07) - **[k8s]** Fix typos in docs and an OCSP log message ([#13722](https://github.com/traefik/traefik/pull/13722) @MsfPablo) - **[k8s, k8s/ingress-nginx]** Fix redirect www host with a non-numeric port ([#13708](https://github.com/traefik/traefik/pull/13708) @mmatur) - **[k8s/ingress-nginx]** Fix TLS option name collision across namespaces in the ingress-nginx provider ([#13721](https://github.com/traefik/traefik/pull/13721) @gndz07) - **[server]** Add an entry point option to handle request headers with aliasing names ([#13720](https://github.com/traefik/traefik/pull/13720) @rtribotte) - **[tcp, udp]** Reject negative weights in TCP and UDP weighted services ([#13749](https://github.com/traefik/traefik/pull/13749) @rtribotte) - Bump etcd client modules to v3.5.33 ([#13756](https://github.com/traefik/traefik/pull/13756) @mmatur) **Documentation:** - **[k8s]** Update redirections block reference in basic.md ([#13723](https://github.com/traefik/traefik/pull/13723) @Larzenegger) - **[k8s]** Fix formatting in Kubernetes setup guide ([#13742](https://github.com/traefik/traefik/pull/13742) @stefkiourk) - **[security]** Document the security threat model and settled security decisions ([#13740](https://github.com/traefik/traefik/pull/13740) @emilevauge) - **[service]** Clarify ServersTransport behavior for the errors middleware in Kubernetes ([#13531](https://github.com/traefik/traefik/pull/13531) @lazerg) - Fix v3.7.11 migration guide ([#13730](https://github.com/traefik/traefik/pull/13730) @gndz07) - Move Jean-Baptiste Doumenjou and Mathieu Lonjaret to past maintainers ([#13736](https://github.com/traefik/traefik/pull/13736) @emilevauge) - Reduce SECURITY.md to a pointer to the security documentation ([#13732](https://github.com/traefik/traefik/pull/13732) @emilevauge) - Update end of support dates ([#13712](https://github.com/traefik/traefik/pull/13712) @nmengin)
Related Repositories
public-apis/public-apis★ 491,146
A collective list of free APIs
NousResearch/hermes-agent★ 255,989
The agent that grows with you
yt-dlp/yt-dlp★ 200,094
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,498
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,704
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.