Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-6512
  • Go/github.com/caddyserver/caddy/v2
 Vulnerabilities in handler/placeholder layer in github.com/caddyserver/caddy 01 Oct
  • Fix available
GHSA-j8px-rmrx-76h9
  • Go/github.com/caddyserver/caddy/v2
 Caddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass 18 Sep
  • Fix available
  • Severity - 6.5 (Medium)
GO-2026-5346
  • Go/github.com/caddyserver/caddy/v2
 Caddy: FastCGI header normalization bypass in forward_auth copy_headers in github.com/caddyserver/caddy 24 Jul
  • Fix available
GO-2026-5408
  • Go/github.com/caddyserver/caddy/v2
 Caddy: Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path Matching in github.com/caddyserver/caddy 24 Jul
  • Fix available
GO-2026-5492
  • Go/github.com/caddyserver/caddy/v2
 Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files in github.com/caddyserver/caddy 24 Jul
  • Fix available
GO-2026-5595
  • Go/github.com/caddyserver/caddy/v2
 Caddy: Windows file server path authorization bypass via encoded backslash in github.com/caddyserver/caddy 24 Jul
  • Fix available
GO-2026-5660
  • Go/github.com/caddyserver/caddy/v2
 Caddy: stripHTML template function bypass in github.com/caddyserver/caddy 24 Jul
  • Fix available
GO-2026-5730
  • Go/github.com/caddyserver/caddy/v2
 Caddy CVE-2026-30852 Fix Bypass in github.com/caddyserver/caddy 24 Jul
  • Fix available
GO-2026-5743
  • Go/github.com/caddyserver/caddy/v2
 Remote Admin Authorization Bypass in "/config" API via Array Index Normalization in github.com/caddyserver/caddy 07 Jul
  • Fix available
GHSA-vcc4-2c75-vc9v
  • Go/github.com/caddyserver/caddy
  • Go/github.com/caddyserver/caddy/v2
 Caddy: stripHTML template function bypass 16 Jun
  • Fix available
  • Severity - 4.2 (Medium)
GHSA-f59h-q822-g45g
  • Go/github.com/caddyserver/caddy
  • Go/github.com/caddyserver/caddy/v2
 Caddy: FastCGI header normalization bypass in `forward_auth copy_headers` 16 Jun
  • Fix available
  • Severity - 8.1 (High)
GHSA-qrp7-cvwr-j2c6
  • Go/github.com/caddyserver/caddy
  • Go/github.com/caddyserver/caddy/v2
 Caddy: Windows `file_server` path authorization bypass via encoded backslash 16 Jun
  • Fix available
  • Severity - 7.5 (High)
GHSA-gx7w-56w6-g48x
  • Go/github.com/caddyserver/caddy/v2
 Caddy: Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path Matching 19 May
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-wwhq-w58m-w29c
  • Go/github.com/caddyserver/caddy/v2
 Caddy CVE-2026-30852 Fix Bypass 19 May
  • No fix available
  • Severity - 5.5 (Medium)
GHSA-x5w9-xh9r-mvfc
  • Go/github.com/caddyserver/caddy/v2
 Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization 19 May
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-m675-2p33-xv9g
  • Go/github.com/caddyserver/caddy/v2
 Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files 18 May
  • Fix available
  • Severity - 8.1 (High)
Load more...