github.com/caddyserver/caddy vulnerabilities (Go)

6 vulnerabilities.

• github.com/caddyserver/caddy Go Caddy: stripHTML template function bypass CVE-2026-52846 Fix available 4.2 MediumJune 16, 2026
• github.com/caddyserver/caddy Go Caddy: FastCGI header normalization bypass in `forward_auth copy_headers` CVE-2026-52845 Fix available 8.1 HighJune 16, 2026
• github.com/caddyserver/caddy Go Caddy: Windows `file_server` path authorization bypass via encoded backslash CVE-2026-52844 Fix available 7.5 HighJune 16, 2026
• github.com/caddyserver/caddy Go Open redirect in caddy CVE-2022-29718 Fix available 6.1 MediumJune 2, 2022
• github.com/caddyserver/caddy Go Caddy vulnerable to Authentication Bypass due to mishandling of TLS client authentication CVE-2018-21246 Fix available 9.8 CriticalJune 15, 2020
• github.com/caddyserver/caddy Go Caddy allows enumeration of Certificates and Hostnames CVE-2018-19148 Fix available 3.7 LowNovember 10, 2018