Vulnerability Reporttraefik:v3.7.13

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. It has 23 exposed-surface findings, but none are severity 7.0 or higher; the highest is CVE-2026-78669 at 6.38, an HTTP/2 CPU-exhaustion denial-of-service issue that could disrupt availability if a malicious HTTP/2 peer sends excessive SETTINGS frames. Three post-exploit-only findings are present, but none reach severity 6.0 and their maximum is 1.99, so they are not the primary concern. Because the image is official and digest-pinned, the main practical action is to patch or mitigate CVE-2026-78669, and disabling HTTP/2 would fully eliminate that issue if it is not required.