CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

net/traefik3.7.15_1

High availability reverse proxy and load balancer

Maintainer
riggs@FreeBSD.org
Packages
traefik 3.7.15_1
Upstream
up to date
CPE
traefik:traefik from the port
WWW
https://traefik.io/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (1) · listed, port not fixed yet

Fixed (24)

VuXML entries whose affected range this version has left.

Commits (196)

Thomas Zander (riggs) · 3.7.16
net/traefik: Update to upstream release 3.7.16

Details:
- Bug- and security fixes, see
  https://github.com/traefik/traefik/releases/tag/v3.7.16

MFH:		2026Q4
Security:	https://github.com/traefik/traefik/security/advisories/GHSA-hrpp-p4fc-wwf8
2354a0a5d8
Dag-Erling Smørgrav (des) · 3.7.15_1
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Thomas Zander (riggs) · 3.7.15
net/traefik: Update to upstream release 3.7.15

Details:
- Bug- and security fixes, see
  https://github.com/traefik/traefik/releases/tag/v3.7.15

MFH:		2026Q4
Security:	https://github.com/traefik/traefik/security/advisories/GHSA-p8wx-ph99-xgcr
		https://github.com/traefik/traefik/security/advisories/GHSA-ww7c-q3mv-xx22
		https://github.com/traefik/traefik/security/advisories/GHSA-28hp-c82p-8vqj
9e3f193d2e
Thomas Zander (riggs) · 3.7.14
net/traefik: Update to upstream release 3.7.14

Details:
- Bug- and security fixes, see
  https://github.com/traefik/traefik/releases/tag/v3.7.14

MFH:		2026Q4
Security:	https://github.com/traefik/traefik/security/advisories/GHSA-53qr-784g-cj35
		https://github.com/traefik/traefik/security/advisories/GHSA-cw35-4q88-3rmp
		https://github.com/traefik/traefik/security/advisories/GHSA-fh26-gfpp-7xxx
		https://github.com/traefik/traefik/security/advisories/GHSA-mwrr-6hp4-pxr6
		https://github.com/traefik/traefik/security/advisories/GHSA-qm9f-w54v-q2qh
		https://github.com/traefik/traefik/security/advisories/GHSA-qvj7-gq9c-hp7q
		https://github.com/traefik/traefik/security/advisories/GHSA-rv2h-qh7j-xrjw
		https://github.com/traefik/traefik/security/advisories/GHSA-mhjw-hmjv-p99x
59439a24e5
Dag-Erling Smørgrav (des) · 3.7.13_1
various: Bump Go ports
031fc6bfbf
Dag-Erling Smørgrav (des) · 3.7.13
various: Drop Go 1.26+ version pin

This is a nop since 1.26 is the oldest supported version.
2c73fa4d6e
Thomas Zander (riggs) · 3.7.13
net/traefik: Update to upstream release 3.7.13

Details:
* Bug- and security fixes, see
  https://github.com/traefik/traefik/releases/tag/v3.7.13
* Changes may require updating the configuration, see
  https://doc.traefik.io/traefik/v3.7/migrate/v3/#v3713

MFH:		2026Q3
Security:	https://github.com/traefik/traefik/security/advisories/GHSA-qqjf-53cj-pwvv
		https://github.com/traefik/traefik/security/advisories/GHSA-f52w-8j3h-j724
		https://github.com/traefik/traefik/security/advisories/GHSA-v67p-phpq-fc8x
		https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326
		https://github.com/traefik/traefik/security/advisories/GHSA-8fcf-v89g-xpg6
8fb2c0fd08
Adam Weinberger (adamw) · 3.7.11_1
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Thomas Zander (riggs) · 3.7.11
net/traefik: Update to upstream version 3.7.11

Details:
- Multiple bug- and security fixes, see
  https://github.com/traefik/traefik/releases/tag/v3.7.11
- No breaking config changes

MFH:		2026Q3
Security:	https://github.com/traefik/traefik/security/advisories/GHSA-5w68-77r2-r64c
		https://github.com/traefik/traefik/security/advisories/GHSA-g55h-rg46-x9c5
		https://github.com/traefik/traefik/security/advisories/GHSA-j994-9gqj-9hwq
		https://github.com/traefik/traefik/security/advisories/GHSA-m6wx-622r-48r9
c823c538ba
Dag-Erling Smørgrav (des) · 3.7.10_2
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 3.7.10_1
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Thomas Zander (riggs) · 3.7.10
net/traefik: Update to upstream release 3.7.10

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.7.10

MFH:		2026Q3
1454efd1ab
Thomas Zander (riggs) · 3.7.9
net/traefik: Update to upstream release 3.7.9

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.7.9

MFH:		2026Q3
44bbab19a9
Thomas Zander (riggs) · 3.7.8
net/traefik: Update to upstream release 3.7.8

Details:
- Bug-, doc- and security fixes, see
  https://github.com/traefik/traefik/releases/tag/v3.7.8

MFH:		2026Q3
Security:	https://github.com/traefik/traefik/security/advisories/GHSA-cxjq-mrr5-89rv
		https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv
		https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj
		https://github.com/traefik/traefik/security/advisories/GHSA-8rxv-jg7p-wvg3
e8b169b0e7
Dag-Erling Smørgrav (des) · 3.7.6_1
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Thomas Zander (riggs) · 3.7.6
net/traefik: Update to upstream release 3.7.6

Details:
- Bug- and docfixes, see
  https://github.com/traefik/traefik/releases/tag/v3.7.6
- Fixes multiple vulnerabilities in the process, see CVE IDs
  and release notes linked above.

MFH:		2026Q2
Security:	CVE-2026-54763
		CVE-2026-54764
		CVE-2026-54765
08e9db4121
Thomas Zander (riggs) · 3.7.5
net/traefik: Update to upstream release 3.7.5

Details:
- Update to upstream release 3.7.5, see:
  https://github.com/traefik/traefik/releases/tag/v3.7.5
- Fixes 2 CVEs in the process, see below

MFH:		2026Q2
Security:	CVE-2026-48020
		CVE-2026-48491
183293183e
Dag-Erling Smørgrav (des) · 3.7.1_1
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Thomas Zander (riggs) · 3.7.1
net/traefik: Update to upstream release 3.7.1

Details:
- Update to 3.7.x branch, details see:
  https://github.com/traefik/traefik/releases/tag/v3.7.1
- Breaking changes are not expected, but double-checking
  the migration guide is still recommended:
  https://doc.traefik.io/traefik/v3.7/migrate/v3/#v371

MFH:		2026Q2
Security:	CVE-2026-44774
db2e3009d5
Adam Weinberger (adamw) · 3.6.16_1
various: Bump ports for Go 1.25.10
4e243a83f8
Thomas Zander (riggs) · 3.6.16
net/traefik: Update to upstream release 3.6.16

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.6.16

MFH:		2026Q2
ded1bd1c63
Thomas Zander (riggs) · 3.6.15
net/traefik: Update to upstream release 3.6.15

Details:
- Bugfix release, see:
  https://github.com/traefik/traefik/releases/tag/v3.6.15

MFH:		2026Q2
0f27e4aa15
Thomas Zander (riggs) · 3.6.13
net/traefik: Update to upstream release 3.6.13

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.6.13

MFH:		2026Q2
4837d95797
Dag-Erling Smørgrav (des) · 3.6.12_1
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Thomas Zander (riggs) · 3.6.12
net/traefik: Update to upstream release 3.6.12

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.6.12
- Includes security fixes:
  - BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField
  - Update dependency for a previously vulnerable gRPC-go implementation

MFH:		2026Q1
Security:	CVE-2026-33433
		CVE-2026-33186
3c1a911846
Thomas Zander (riggs) · 3.6.11
net/traefik: Update to upstream release 3.6.11

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.6.11
- Includes security fixes for several vulnerabilities.
  CVE-2026-32595 (BasicAuth Middleware Timing Attack)
  CVE-2026-32305 (Potential mTLS Bypass via Fragmented TLS ClientHello)
  CVE-2026-32695 (Details not yet available)

MFH:		2026Q1
Security:	CVE-2026-32595
		CVE-2026-32305
		CVE-2026-32695
e89149eb3d
Thomas Zander (riggs) · 3.6.10
net/traefik: Update to upstream version 3.6.10

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.6.10

MFH:		2026Q1
d01300137d
Adam Weinberger (adamw) · 3.6.9_1
various: Bump ports for Go 1.25.8
a8d318da7c
Thomas Zander (riggs) · 3.6.9
net/traefik: Update to upstream release 3.6.9

Details:
- Bug and documentation fixes, see
  https://github.com/traefik/traefik/releases/tag/v3.6.9

MFH:		2026Q1
a2bced47f0
Thomas Zander (riggs) · 3.6.8
net/traefik: Ensure the build uses go 1.25 or higher
0682bdf7d4
Thomas Zander (riggs) · 3.6.8
net/traefik: Update to upstream release 3.6.8

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.6.8
- Includes a fix for CVE-2026-25949, a potential DoS

MFH:		2026Q1
Security:	CVE-2026-25949
f164467deb
Adam Weinberger (adamw) · 3.6.7_1
various: Bump ports for Go default 1.24->1.25
97685c1886
Thomas Zander (riggs) · 3.6.7
net/traefik: Update to upstream release 3.6.7

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.6.7
- Addresses a potential DoS vulnerability, see
  https://github.com/traefik/traefik/security/advisories/GHSA-cwjm-3f7h-9hwq
- This may require an update to the traefik configuration:
  https://doc.traefik.io/traefik/v3.6/migrate/v3/#v367

MFH:		2026Q1
Security:	CVE-2026-22045
a18d213f91
Adam Weinberger (adamw) · 3.6.6_2
various: Bump Go ports for 1.24.13
529df949a5
Adam Weinberger (adamw) · 3.6.6_1
various: Bump Go ports for 1.24.12
013f2d30b0
Thomas Zander (riggs) · 3.6.6
net/traefik: Update to upstream release 3.6.6

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.6.6
949055d185
Thomas Zander (riggs) · 3.6.5
net/traefik: Update to upstream release 3.6.5

Details:
- This contains bug, doc and security fixes, see
  - https://github.com/traefik/traefik/releases/tag/v3.6.5
  - https://github.com/traefik/traefik/releases/tag/v3.6.4
  - https://github.com/traefik/traefik/releases/tag/v3.6.2
- This contains a breaking change regarding encoded request
  paths. If special encoded characters are needed, they now
  need to be explicitly allowed, see the migration guide:
  https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364

Security:	CVE-2025-66490
		CVE-2025-66491
278f9034fc
Dag-Erling Smørgrav (des) · 3.6.2_1
many: Unpin Go ports

* Ports that were pinned to a deprecated version of Go (1.23 or older)
  have been unpinned.

* Ports that were pinned to a still-supported version of Go (1.24 or
  newer) have been converted to requesting that as their minimum Go
  version.

* Ports that had been forcibly deprecated for pinning an expired Go
  version have been undeprecated.
75d873b56a
Adam Weinberger (adamw) · 3.6.2_1
various: Bump Go ports for 1.24.11
b24429e3ed
Thomas Zander (riggs) · 3.6.2
net/traefik: Update to upstream version 3.6.2

Details:
- Move to 3.6 branch
- Release details see:
  https://github.com/traefik/traefik/releases/tag/v3.6.2
- For some configurations, modifications might be required,
  see the migration guide:
  https://doc.traefik.io/traefik/master/migrate/v3/#v360
52260bfa8f
Thomas Zander (riggs) · 3.5.6
net/traefik: Update to upstream release 3.5.6

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.5.6

MFH:		2025Q4
89320f2fdc
Adam Weinberger (adamw) · 3.5.3_3
various: Bump Go ports for 1.24.10
0dfced16fb
Adam Weinberger (adamw) · 3.5.3_2
various: Bump go ports for go-1.24.9
90f976619b
Adam Weinberger (adamw) · 3.5.3_1
many: Bump dependent ports after go124 update
2e7587aaf8
Thomas Zander (riggs) · 3.5.3
net/traefik: Update to upstream release 3.5.3

Details:
- Bug fixes and documentation improvements, see
  https://github.com/traefik/traefik/releases/tag/v3.5.3
13ec05619c
Thomas Zander (riggs) · 3.5.2
net/traefik: Update to upstream version 3.5.2

Details:
- Start tracking the 3.5.x branch.
- Migration: When using proxyProtocol option for TCP LoadBalancer, a
  manual config change must be applied, see
  proxyProtocol option for TCP LoadBalancer

MFH:		2025Q3
4da322e9d0
Adam Weinberger (adamw) · 3.4.5_2
many: Bump go ports for go-1.24.7
31a5a229a7
Adam Weinberger (adamw) · 3.4.5_1
go ports: Bump for 1.24.6
53610681ea
Thomas Zander (riggs) · 3.4.5
net/traefik: Update to upstream release 3.4.5

Details:
- Bugfix release, see
  https://github.com/traefik/traefik/releases/tag/v3.4.5

MFH:		2025Q3
b847444f03
Thomas Zander (riggs) · 3.4.4
net/traefik: Update to upstream release 3.4.4

Details:
- Bugfixes, see
  https://github.com/traefik/traefik/releases/tag/v3.4.4

MFH:		2025Q3
8416467964