traefik

Reverse Proxies & Load Balancers

A modern HTTP reverse proxy and load balancer that automatically discovers microservices from orchestration platforms.

Track releases GitHub Website

Go Latest v3.7.2 · 12h ago Security brief →

Features

Auto‑discovers routes from Docker, Kubernetes, Consul, etc. without restarts
Provides HTTPS via automatic Let's Encrypt (including wildcard certs)
Offers a web UI, metrics (Prometheus, Datadog, Statsd, InfluxDB), and access logs

Recent releases

View all 30 releases →

Review required

v3.7.2 Bug fix 12h

Auth Breaking upgrade Dependencies

TCP router + K8s headers + logs + GatewayAPI +

Open

Review required

v2.11.47 Bug fix 16h

Auth Breaking upgrade

BasicAuth + Ingress + SNICheck

Open

v3.7.1 Security relevant 23d

Security fixes

CVE-2026-44774 — fixed (GHSA-96qj-4jj5-wcjc)

Full changelog

Important: Please read the migration guide.

CVE fixed:

CVE-2026-44774 (Advisory GHSA-96qj-4jj5-wcjc)

Bug fixes:

[k8s/ingress, k8s/crd, k8s/gatewayapi] Add CrossProviderNamespaces option (#13094 @rtribotte)
[k8s/crd] Fix cross-provider ref check for Kubernetes CRD provider (#13121 @rtribotte)

View release on GitHub

v3.6.17 Security relevant 23d

Security fixes

CVE-2026-44774 (GHSA-96qj-4jj5-wcjc) — security vulnerability fixed.

Full changelog

Important: Please read the migration guide.

CVE fixed:

CVE-2026-44774 (Advisory GHSA-96qj-4jj5-wcjc)

Bug fixes:

[k8s/ingress, k8s/crd, k8s/gatewayapi] Add CrossProviderNamespaces option (#13094 @rtribotte)
[k8s/crd] Fix cross-provider ref check for Kubernetes CRD provider (#13121 @rtribotte)

View release on GitHub

v2.11.46 Security relevant 23d

Security fixes

CVE-2026-44774 — security vulnerability fixed (GHSA-96qj-4jj5-wcjc)

Full changelog

Important: Please read the migration guide.

CVE fixed:

CVE-2026-44774 (Advisory GHSA-96qj-4jj5-wcjc)

Bug fixes:

[k8s/ingress, k8s/crd, k8s/gatewayapi] Add CrossProviderNamespaces option (#13094 @rtribotte)
[k8s/crd] Fix cross-provider ref check for Kubernetes CRD provider (#13121 @rtribotte)

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.