# New Security Update for Traefik 2.11 (2.11.61) and 3.7 (3.7.17)

**URL:** <https://community.traefik.io/t/new-security-update-for-traefik-2-11-2-11-61-and-3-7-3-7-17/30334>\
**Category:** Announcements\
**Created:** [November 2, 2026, 9:21am UTC](https://community.traefik.io/t/new-security-update-for-traefik-2-11-2-11-61-and-3-7-3-7-17/30334 "2026-11-02T09:21:42Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![kevinpollet](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/kevinpollet/32/1755_2.png) [@kevinpollet](https://community.traefik.io/u/kevinpollet)\
**Post date:** [November 2, 2026, 9:21am UTC](https://community.traefik.io/t/new-security-update-for-traefik-2-11-2-11-61-and-3-7-3-7-17/30334/1 "2026-11-02T09:21:42Z")

</div>

Hi everyone,

We have released new security updates for Traefik Proxy: 2.11.61 and 3.7.17.

These releases fix the following security advisory (only 2.11.58 to 2.11.60 and 3.7.14 to 3.7.16 are affected; Traefik 3.6 and earlier are not affected):

- [High] GHSA-xv5x-242w-7hf7: an unauthenticated client could make Traefik keep a dedicated backend connection and its resources for every client connection by sending an NTLM or Negotiate Authorization header, exhausting the memory of the process. Fixed in 2.11.61 and 3.7.17.  
[Per-connection backend transport leak from unauthenticated Negotiate/NTLM headers · Advisory · traefik/traefik · GitHub](https://github.com/traefik/traefik/security/advisories/GHSA-xv5x-242w-7hf7)

Release notes:

- [Release v2.11.61 · traefik/traefik · GitHub](https://github.com/traefik/traefik/releases/tag/v2.11.61)
- [Release v3.7.17 · traefik/traefik · GitHub](https://github.com/traefik/traefik/releases/tag/v3.7.17)

We strongly recommend upgrading as soon as possible.

The Traefik team