# SHA hash changed for Traefik image v3.7.13 in Docker Hub ?

**URL:** <https://community.traefik.io/t/sha-hash-changed-for-traefik-image-v3-7-13-in-docker-hub/30253>\
**Category:** Traefik\
**Tags:** docker\
**Created:** [September 25, 2026, 7:31am UTC](https://community.traefik.io/t/sha-hash-changed-for-traefik-image-v3-7-13-in-docker-hub/30253 "2026-09-25T07:31:40Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mig5](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/mig5/32/11341_2.png) [@mig5](https://community.traefik.io/u/mig5)\
**Post date:** [September 25, 2026, 7:31am UTC](https://community.traefik.io/t/sha-hash-changed-for-traefik-image-v3-7-13-in-docker-hub/30253/1 "2026-09-25T07:31:40Z")

</div>

Hi there!

I noticed that the manifest SHA hash has changed in Docker hub for Traefik v3.7.13.

It went from:

```auto
docker.io/library/traefik:v3.7.13@sha256:96780238b1bbda5a9bb997f4307ce69e798ad1cf6eb7f2dcc0a440823467d199

```

to:

```auto
docker.io/library/traefik:v3.7.13@sha256:3429c14149401de2ac82fc72ddc6a92642332b90deb3012301ff211b9d2d0f18

```

...2 days ago.

Presumably this was just to pick up base OS updates without a change to Traefik itself. However, since this is exactly what a supply chain attack on the Docker image would look like (and I couldn't find an announcement about the change anywhere else), I wanted to double check before I updated my hash 🙂

Thanks!

---

<div class="post-metadata">

**Author:** ![kevinpollet](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/kevinpollet/32/1755_2.png) [@kevinpollet](https://community.traefik.io/u/kevinpollet)\
**Post date:** [September 25, 2026, 7:47am UTC](https://community.traefik.io/t/sha-hash-changed-for-traefik-image-v3-7-13-in-docker-hub/30253/2 "2026-09-25T07:47:04Z")

</div>

Hello @mig5 and thanks for checking,

This is expected. Traefik is a Docker Official Image, so Docker's team rebuilds it whenever its base image is updated. Alpine recently received CVE fixes, so `v3.7.13` was rebuilt on top of it. The Traefik binary is unchanged; only the OS layers differ, which is why the digest changed.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/containo/original/2X/b/bd81ebdb578656e76e56ff3cc3eed021d3ba132d.png) [@system](https://community.traefik.io/u/system)\
**Post date:** [September 28, 2026, 7:47am UTC](https://community.traefik.io/t/sha-hash-changed-for-traefik-image-v3-7-13-in-docker-hub/30253/3 "2026-09-28T07:47:45Z")

</div>

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.