All products

github.com/caddyserver/caddy

Go · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Open redirect in caddyCVE-2022-29718 · GHSA-2927-HV3P-F3VP github.com/caddyserver/caddy/v2github.com/caddyserver/caddy Go Medium Fix reported
Caddy: stripHTML template function bypassCVE-2026-52846 · GHSA-VCC4-2C75-VC9VVersion ranges need review. github.com/caddyserver/caddy/v2github.com/caddyserver/caddy Go Medium Fix reported
Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`CVE-2026-52845 · GHSA-F59H-Q822-G45GVersion ranges need review. github.com/caddyserver/caddy/v2github.com/caddyserver/caddy Go High Fix reported
Caddy: Windows `file_server` path authorization bypass via encoded backslashCVE-2026-52844 · GHSA-QRP7-CVWR-J2C6Version ranges need review. github.com/caddyserver/caddy/v2github.com/caddyserver/caddy Go High Fix reported
Caddy vulnerable to Authentication Bypass due to mishandling of TLS client authenticationCVE-2018-21246 · GHSA-GR7W-X2JP-3XGW github.com/caddyserver/caddygithub.com/mholt/caddy Go Critical Fix reported
Caddy allows enumeration of Certificates and HostnamesCVE-2018-19148 · GHSA-JF2W-MQ6R-56V8 github.com/caddyserver/caddy Go Low Fix reported