A request read timeout that's enabled, documented, and visible in the configuration isn't much help if it never applies.
Our latest advisory covers a Traefik HTTP/3 vulnerability that could allow unauthenticated clients to tie up backend connections indefinitely.
