- Fixed CVE-2026-54763 and CVE-2026-54764 security vulnerabilities
- Added configurable max request header size and an option to strip request headers containing underscores
- Updated documentation for HTTP/2 header memory exhaustion and maxHeaderBytes settings
v2.11.51
Official Traefik changelog summary with source attribution, release tags, and community reactions.
Track this Traefik release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Traefik release note into a weekly digest for the tools you actually use.
Create digestMore Traefik changelog updates
Bumped multiple dependencies (acme/lego, DataDog/dd-trace-go, golang.org/x/text, etc.) to newer versions.
Fixed authentication singleflight key collision and router name collisions in Kubernetes Gateway API provider.
Updated tracing library to dd-trace-go v2.8.1 and upgraded golang.org/x/text and x/net packages