Traefik 1.7 lifecycle

Current status

unknownmedium

Lifecycle information for Traefik 1.7 is incomplete in the available first-party sources.

Security: 9 tracked advisories affecting this line · 1 in CISA KEV. Details below — lifecycle and vulnerability status are separate.

Official lifecycle source: OSV.dev

Support phase
unknown
End of life
Not officially published
Latest release
1.7.34
Released
10 Dec 2021

At a glance

Version line
1.7
Initial release
24 Sept 2018
Lifecycle phase
unknown
Latest stable
1.7.34
Latest release date
10 Dec 2021
EOL
Not officially published
Risk
medium
Releases tracked
34

Lifecycle timeline

Phases from published LifecyclePeriod records. Missing phases are not inferred.

Lifecycle information is incomplete in the available first-party sources.

Lifecycle information for Traefik 1.7 is incomplete in the available first-party sources.

Known exploited vulnerabilities

CVE entries that CISA lists in the Known Exploited Vulnerabilities catalogue, including due dates and ransomware use when published. CVSS shown when NVD enrichment is available.

  • CVE-2023-44487Known exploited

    HTTP/2 Rapid Reset Attack Vulnerability

    CISA KEV:
    listed · added 2023-10-10 · due 2023-10-31
    Required action:
    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    Affected:
    <10.5.3; <9.4.0; <1.28.0; <2.7.5; <=2.427; <4.2.2; <3.4.2; <1.22; <1.26.0; <4.1.100; <1.57.0; <2.5.0
    Fixed in:
    10.5.3, 9.4.0, 1.28.0, 2.7.5, 4.2.2, 3.4.2, 1.22, 1.26.0, 4.1.100, 1.57.0, 2.5.0
    Source:
    CISA KEV · Advisory

Security

Advisories affecting Traefik 1.7 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.

Known vulnerabilities
9
Known exploited
1
Highest CVSS
  • CVE-2023-44487Known exploited

    HTTP/2 Rapid Reset Attack Vulnerability

    CISA KEV:
    listed · added 2023-10-10 · due 2023-10-31
    Required action:
    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    Affected:
    <10.5.3; <9.4.0; <1.28.0; <2.7.5; <=2.427; <4.2.2; <3.4.2; <1.22; <1.26.0; <4.1.100; <1.57.0; <2.5.0
    Fixed in:
    10.5.3, 9.4.0, 1.28.0, 2.7.5, 4.2.2, 3.4.2, 1.22, 1.26.0, 4.1.100, 1.57.0, 2.5.0
    Source:
    CISA KEV · Advisory
  • CVE-2026-53622

    Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts

    Affected:
    <3.7.3
    Fixed in:
    3.7.3
    Source:
    OSV source · Advisory
  • CVE-2026-29777

    Traefik has a kubernetes gateway rule injection via unescaped backticks in HTTPRoute match values

    Affected:
    <3.6.10
    Fixed in:
    3.6.10
    Source:
    OSV source · Advisory
  • CVE-2026-25949

    Traefik: TCP readTimeout bypass via STARTTLS on Postgres

    Affected:
    <3.6.8
    Fixed in:
    3.6.8
    Source:
    OSV source · Advisory
  • CVE-2022-46153

    Routes exposed with an empty TLSOption in traefik

    Affected:
    <2.9.6
    Fixed in:
    2.9.6
    Source:
    OSV source · Advisory
  • CVE-2022-23469

    Authorization header displayed in the debug logs

    Affected:
    <2.9.6
    Fixed in:
    2.9.6
    Source:
    OSV source · Advisory
  • CVE-2022-23632

    Traefik skips the router TLS configuration when the host header is an FQDN

    Affected:
    <2.6.1
    Fixed in:
    2.6.1
    Source:
    OSV source · Advisory
  • CVE-2021-32813
    Affected:
    <2.4.13
    Fixed in:
    2.4.13
    Source:
    OSV source · Advisory
  • CVE-2021-27375
    Affected:
    <2.4.5
    Fixed in:
    2.4.5
    Source:
    OSV source · Advisory

Latest release

Previous releases

  • 1.7.33

    7 Oct 2021

  • 1.7.32

    6 Oct 2021

  • 1.7.31

    4 Oct 2021

Release history

34 concrete releases tracked for this line.

VersionRelease dateChannelSource
1.7.829 Jan 2019stableSource
1.7.78 Jan 2019stableSource
1.7.614 Dec 2018stableSource
1.7.53 Dec 2018stableSource
1.7.430 Oct 2018stableSource
1.7.315 Oct 2018stableSource
1.7.24 Oct 2018stableSource
1.7.128 Sept 2018stableSource
1.7.024 Sept 2018stableSource

Release activity

Total releases
34
Last 30 days
0
Last 90 days
0
Avg. interval
~36 days
Most recent
10 Dec 2021

Should I use this version?

Lifecycle status unclear

CompatHub does not currently have a clear support status for Traefik 1.7.

Version comparison

Compact comparison against the nearest relevant release lines.

1.72.0
Statusunknownunknown
Latest release1.7.342.0.7
EOLNot publishedNot published
Riskmediummedium

Sources

Where this information comes from.

Lifecycle sources

Release sources

Data coverage

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Releases tracked
34
Lifecycle periods
0
EOL
Not officially published
Provenance records
1
Data last checked
1 Sept 2026
Latest source update
1 Sept 2026

Lifecycle information is incomplete in the available first-party sources.

EOL: Not officially published

Other Traefik versions