Traefik 3.7 lifecycle

Current status

standard supportlow

Traefik 3.7 is currently in standard support.

Security: 2 tracked advisories affecting this line · 1 in CISA KEV. Details below — lifecycle and vulnerability status are separate.

Official lifecycle source: Traefik GitHub Releases

Support phase
standard support
End of life
Not officially published
Latest release
3.7.12
Released
26 Aug 2026

At a glance

Version line
3.7
Initial release
5 May 2026
Lifecycle phase
standard support
Latest stable
3.7.12
Latest release date
26 Aug 2026
EOL
Not officially published
Risk
low
Releases tracked
12

Lifecycle timeline

Phases from published LifecyclePeriod records. Missing phases are not inferred.

  1. Release

    5 May 2026

  2. standard supportcurrent

    5 May 2026 → —

    Source: Traefik GitHub Releases

Traefik 3.7 is currently in standard support.

Known exploited vulnerabilities

CVE entries that CISA lists in the Known Exploited Vulnerabilities catalogue, including due dates and ransomware use when published. CVSS shown when NVD enrichment is available.

  • CVE-2023-44487Known exploited

    HTTP/2 Rapid Reset Attack Vulnerability

    CISA KEV:
    listed · added 2023-10-10 · due 2023-10-31
    Required action:
    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    Affected:
    <10.5.3; <9.4.0; <4.2.2; <4.1.100
    Fixed in:
    10.5.3, 9.4.0, 4.2.2, 4.1.100
    Source:
    CISA KEV · Advisory

Security

Advisories affecting Traefik 3.7 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.

Known vulnerabilities
2
Known exploited
1
Highest CVSS
  • CVE-2023-44487Known exploited

    HTTP/2 Rapid Reset Attack Vulnerability

    CISA KEV:
    listed · added 2023-10-10 · due 2023-10-31
    Required action:
    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    Affected:
    <10.5.3; <9.4.0; <4.2.2; <4.1.100
    Fixed in:
    10.5.3, 9.4.0, 4.2.2, 4.1.100
    Source:
    CISA KEV · Advisory
  • CVE-2026-53622

    Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts

    Affected:
    <3.7.3
    Fixed in:
    3.7.3
    Source:
    OSV source · Advisory

Latest release

Previous releases

  • 3.7.11

    19 Aug 2026

  • 3.7.10

    31 Jul 2026

  • 3.7.9

    24 Jul 2026

Release history

12 concrete releases tracked for this line.

VersionRelease dateChannelSource
3.7.1226 Aug 2026stableSource
3.7.1119 Aug 2026stableSource
3.7.1031 Jul 2026stableSource
3.7.924 Jul 2026stableSource
3.7.815 Jul 2026stableSource
3.7.78 Jul 2026stableSource
3.7.630 Jun 2026stableSource
3.7.510 Jun 2026stableSource
3.7.45 Jun 2026stableSource
3.7.34 Jun 2026stableSource
3.7.111 May 2026stableSource
3.7.05 May 2026stableSource

Release activity

Total releases
12
Last 30 days
2
Last 90 days
10
Avg. interval
~10 days
Most recent
26 Aug 2026

Should I use this version?

Suitable for new deployments

Traefik 3.7 is currently supported (standard support).

Version comparison

Compact comparison against the nearest relevant release lines.

3.73.6
Statusstandard supportstandard support
Latest release3.7.123.6.25
EOLNot publishedNot published
Risklowlow

Sources

Where this information comes from.

Lifecycle sources

Release sources

Data coverage

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Releases tracked
12
Lifecycle periods
1
EOL
Not officially published
Provenance records
2
Data last checked
1 Sept 2026
Latest source update
1 Sept 2026

EOL: Not officially published

Other Traefik versions