fix(security): upgrade Traefik from v3.6.7 to v3.6.12#4090
Open
andershermansen wants to merge 1 commit intoDokploy:canaryfrom
Open
fix(security): upgrade Traefik from v3.6.7 to v3.6.12#4090andershermansen wants to merge 1 commit intoDokploy:canaryfrom
andershermansen wants to merge 1 commit intoDokploy:canaryfrom
Conversation
Addresses 12 CVEs across 5 patch releases: v3.6.8: CVE-2026-25949, CVE-2025-68121 v3.6.9: CVE-2026-26998, CVE-2026-26999, CVE-2026-29054 v3.6.10: CVE-2026-29777, CVE-2026-27141 v3.6.11: CVE-2026-32595, CVE-2026-32305, CVE-2026-32695 v3.6.12: CVE-2026-33433, CVE-2026-33186
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What is this PR about?
Addresses 12 CVEs in Traefik across 5 patch releases:
v3.6.8: CVE-2026-25949, CVE-2025-68121
v3.6.9: CVE-2026-26998, CVE-2026-26999, CVE-2026-29054
v3.6.10: CVE-2026-29777, CVE-2026-27141
v3.6.11: CVE-2026-32595, CVE-2026-32305, CVE-2026-32695
v3.6.12: CVE-2026-33433, CVE-2026-33186
Checklist
Before submitting this PR, please make sure that:
canarybranch.Greptile Summary
This PR updates the default Traefik Docker image version from
3.6.7to3.6.12inpackages/server/src/setup/traefik-setup.ts, addressing 12 CVEs across 5 patch releases (v3.6.8–v3.6.12). The change is a single-line bump to the fallback value of theTRAEFIK_VERSIONconstant; users who set theTRAEFIK_VERSIONenvironment variable are unaffected.TRAEFIK_VERSION(server-setup.ts,setup.ts) already reference the exported constant, so they will automatically pick up the new default.Confidence Score: 5/5
Safe to merge — a straightforward one-line security patch version bump with no logic changes.
The change is a single-line default version string update with no functional or behavioral changes. All existing consumers use the exported constant. No P1 or P0 issues found.
No files require special attention.
Important Files Changed
Reviews (1): Last reviewed commit: "fix(security): upgrade Traefik from v3.6..." | Re-trigger Greptile
(2/5) Greptile learns from your feedback when you react with thumbs up/down!