Traefik 1.7 lifecycle

Current status

standard supportlow

Traefik 1.7 is currently in standard support.

Security: 9 tracked advisories affecting this line · 1 in CISA KEV. Details below — lifecycle and vulnerability status are separate.

Official lifecycle source: Traefik GitHub Releases

Support phase
standard support
End of life
Not officially published
Latest release
1.7.34
Released
10 Dec 2021

At a glance

Version line
1.7
Initial release
24 Sept 2018
Lifecycle phase
standard support
Latest stable
1.7.34
Latest release date
10 Dec 2021
EOL
Not officially published
Risk
low
Releases tracked
34

Lifecycle timeline

Phases from published LifecyclePeriod records. Missing phases are not inferred.

  1. Release

    24 Sept 2018

  2. standard supportcurrent

    24 Sept 2018 → —

    Source: Traefik GitHub Releases

Traefik 1.7 is currently in standard support.

Upgrade options

Newer supported Traefik version lines from CompatHub lifecycle data. Compatibility and security context use existing evidence only.

You are on Traefik 1.7

Supported

Supported upgrade options

Open full upgrade planner for Traefik 1.7

Known exploited vulnerabilities

CVE entries that CISA lists in the Known Exploited Vulnerabilities catalogue, including due dates and ransomware use when published. CVSS shown when NVD enrichment is available.

  • CVE-2023-44487Known exploited

    HTTP/2 Rapid Reset Attack Vulnerability

    CISA KEV:
    listed · added 2023-10-10 · due 2023-10-31
    Required action:
    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    Affected:
    <10.5.3; <9.4.0; <1.28.0; <2.7.5; <=2.427; <4.2.2; <3.4.2; <1.22; <1.26.0; <4.1.100; <1.57.0; <2.5.0
    Fixed in:
    10.5.3, 9.4.0, 1.28.0, 2.7.5, 4.2.2, 3.4.2, 1.22, 1.26.0, 4.1.100, 1.57.0, 2.5.0
    Source:
    CISA KEV · Advisory

Security

Advisories affecting Traefik 1.7 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.

Known vulnerabilities
9
Known exploited
1
Highest CVSS
  • CVE-2023-44487Known exploited

    HTTP/2 Rapid Reset Attack Vulnerability

    CISA KEV:
    listed · added 2023-10-10 · due 2023-10-31
    Required action:
    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    Affected:
    <10.5.3; <9.4.0; <1.28.0; <2.7.5; <=2.427; <4.2.2; <3.4.2; <1.22; <1.26.0; <4.1.100; <1.57.0; <2.5.0
    Fixed in:
    10.5.3, 9.4.0, 1.28.0, 2.7.5, 4.2.2, 3.4.2, 1.22, 1.26.0, 4.1.100, 1.57.0, 2.5.0
    Source:
    CISA KEV · Advisory
  • CVE-2026-53622

    Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts

    Affected:
    <3.7.3
    Fixed in:
    3.7.3
    Source:
    OSV source · Advisory
  • CVE-2026-29777

    Traefik has a kubernetes gateway rule injection via unescaped backticks in HTTPRoute match values

    Affected:
    <3.6.10
    Fixed in:
    3.6.10
    Source:
    OSV source · Advisory
  • CVE-2026-25949

    Traefik: TCP readTimeout bypass via STARTTLS on Postgres

    Affected:
    <3.6.8
    Fixed in:
    3.6.8
    Source:
    OSV source · Advisory
  • CVE-2022-46153

    Routes exposed with an empty TLSOption in traefik

    Affected:
    <2.9.6
    Fixed in:
    2.9.6
    Source:
    OSV source · Advisory
  • CVE-2022-23469

    Authorization header displayed in the debug logs

    Affected:
    <2.9.6
    Fixed in:
    2.9.6
    Source:
    OSV source · Advisory
  • CVE-2022-23632

    Traefik skips the router TLS configuration when the host header is an FQDN

    Affected:
    <2.6.1
    Fixed in:
    2.6.1
    Source:
    OSV source · Advisory
  • CVE-2021-32813
    Affected:
    <2.4.13
    Fixed in:
    2.4.13
    Source:
    OSV source · Advisory
  • CVE-2021-27375
    Affected:
    <2.4.5
    Fixed in:
    2.4.5
    Source:
    OSV source · Advisory

Latest release

Previous releases

  • 1.7.33

    7 Oct 2021

  • 1.7.32

    6 Oct 2021

  • 1.7.31

    4 Oct 2021

Release history

34 concrete releases tracked for this line.

VersionRelease dateChannelSource
1.7.3410 Dec 2021stableSource
1.7.337 Oct 2021stableSource
1.7.326 Oct 2021stableSource
1.7.314 Oct 2021stableSource
1.7.308 Apr 2021stableSource
1.7.2929 Mar 2021stableSource
1.7.2813 Jan 2021stableSource
1.7.2628 Jul 2020stableSource
1.7.2515 Jul 2020stableSource
1.7.2425 Mar 2020stableSource
1.7.2323 Mar 2020stableSource
1.7.2218 Mar 2020stableSource
1.7.2120 Feb 2020stableSource
1.7.2010 Dec 2019stableSource
1.7.1928 Oct 2019stableSource
1.7.1826 Sept 2019stableSource
1.7.1723 Sept 2019stableSource
1.7.1613 Sept 2019stableSource
1.7.1512 Sept 2019stableSource
1.7.1414 Aug 2019stableSource
1.7.138 Aug 2019stableSource
1.7.1229 May 2019stableSource
1.7.1126 Apr 2019stableSource
1.7.1029 Mar 2019stableSource
1.7.911 Feb 2019stableSource

Release activity

Total releases
34
Last 30 days
0
Last 90 days
0
Avg. interval
~36 days
Most recent
10 Dec 2021

Should I use this version?

Suitable for new deployments

Traefik 1.7 is currently supported (standard support).

Version comparison

Compact comparison against the nearest relevant release lines.

1.73.7
Statusstandard supportstandard support
Latest release1.7.343.7.12
EOLNot publishedNot published
Risklowlow

Sources

Where this information comes from.

Lifecycle sources

Release sources

Data coverage

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Releases tracked
34
Lifecycle periods
1
EOL
Not officially published
Provenance records
2
Data last checked
1 Sept 2026
Latest source update
1 Sept 2026

EOL: Not officially published

Other Traefik versions