Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/caddyserver/caddy/v2

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/caddyserver/caddy/v2 in go

Moderate
14 days ago

Caddy: Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path Matching GSA_kwCzR0hTQS1neDd3LTU2dzYtZzQ4eM4ABXHd

go github.com/caddyserver/caddy/v2
Moderate
14 days ago

Caddy CVE-2026-30852 Fix Bypass GSA_kwCzR0hTQS13d2hxLXc1OG0tdzI5Y84ABXHc

go github.com/caddyserver/caddy/v2
Moderate
14 days ago

Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization GSA_kwCzR0hTQS14NXc5LXhoOXItbXZmY84ABXGs

go github.com/caddyserver/caddy/v2
High
15 days ago

Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files GSA_kwCzR0hTQS1tNjc1LTJwMzMteHY5Z84ABXAe

go github.com/caddyserver/caddy/v2
High
3 months ago

Caddy: Unicode case-folding length expansion causes incorrect split_path index in FastCGI transport GSA_kwCzR0hTQS01cjN2LXZjOG0tbTk2Z84ABSy8

go github.com/caddyserver/caddy/v2
Moderate
3 months ago

Caddy is vulnerable to cross-origin config application via local admin API /load GSA_kwCzR0hTQS04NzlwLTQ3NXgtcnFoMs4ABSy7

go github.com/caddyserver/caddy/v2
High
3 months ago

Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass GSA_kwCzR0hTQS14NzZmLWpmODQtcnFqOM4ABSy6

go github.com/caddyserver/caddy/v2
High
3 months ago

Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass GSA_kwCzR0hTQS1nN3BjLXBjN2ctaDhqaM4ABSy5

go github.com/caddyserver/caddy/v2
High
3 months ago

Caddy: mTLS client authentication silently fails open when CA certificate file is missing or malformed GSA_kwCzR0hTQS1oZmZtLWc4djctd3J2N84ABSy4

go github.com/caddyserver/caddy/v2
Moderate
3 months ago

Caddy: Improper sanitization of glob characters in file matcher may lead to bypassing security protections GSA_kwCzR0hTQS00eHJyLWhxNHctNnZmNM4ABSy3

go github.com/caddyserver/caddy/v2
Moderate
over 3 years ago

Open Redirect in Caddy GSA_kwCzR0hTQS1xcG0zLXZyMzQtaDh3OM4AAxda

go github.com/caddyserver/caddy/v2
Moderate
almost 4 years ago

Open redirect in caddy GSA_kwCzR0hTQS0yOTI3LWh2M3AtZjN2cM4AArUP

go github.com/caddyserver/caddy/v2, github.com/caddyserver/caddy

Filter by Severity

Moderate 7 High 5