Change8

v3.4.0-rc2

Breaking Changes
📦 traefikView on GitHub →
1 breaking🐛 3 fixes

Summary

This release fixes multiple critical CVEs and introduces request path sanitization, which may affect existing routing configurations. It also includes several Kubernetes CRD-related bug fixes.

⚠️ Breaking Changes

  • The incoming request path is now cleaned before being used to match router rules and sent to backends. Paths containing /../, /./, or duplicate slashes will be interpreted and/or collapsed. Users relying on un-sanitized paths for routing may see unexpected behavior.

Migration Steps

  1. Review the request path sanitization changes introduced since v3.4.0-rc2 and consult the migration guide if routing behavior has changed.
  2. Read the migration guide at https://doc.traefik.io/traefik/v3.3/migration/v3/#request-path-sanitization.

🐛 Bug Fixes

  • Removed default load-balancing strategy from Kubernetes CRD.
  • Restricted regex validation of HTTP status codes for Ingress CRD resources.
  • Bumped github.com/redis/go-redis/v9 to v9.7.3.