- Patched CVE-2026-54763, CVE-2026-54764, and CVE-2026-54765 and fixed nondeterministic TLS certificate selection on shared SANs.
- Added server options to drop request headers with underscores and to configure the maximum request header size; numerous bug fixes across ACME, ingress, gateway API, middleware, and Kubernetes components.
- Improved and clarified documentation, Helm chart values, and authentication header handling, and updated CRD reference links.
v3.7.6
Official Traefik changelog summary with source attribution, release tags, and community reactions.
Track this Traefik release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Traefik release note into a weekly digest for the tools you actually use.
Create digestMore Traefik changelog updates
Bumped multiple dependencies (acme/lego, DataDog/dd-trace-go, golang.org/x/text, etc.) to newer versions.
Fixed authentication singleflight key collision and router name collisions in Kubernetes Gateway API provider.
Updated tracing library to dd-trace-go v2.8.1 and upgraded golang.org/x/text and x/net packages