github.com/caddyserver/caddy/v2 vulnerabilities (Go)
21 vulnerabilities.
-
github.com/caddyserver/caddy/v2Go Caddy: RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through 2.9 Low -
github.com/caddyserver/caddy/v2Go Caddy: fileHidden() case-sensitive pattern bypass — exposes "hidden" files via case variation 6.3 Medium -
github.com/caddyserver/caddy/v2Go Caddy: Unbounded body buffer via {http.request.body} placeholder — memory exhaustion DoS 6.9 Medium -
github.com/caddyserver/caddy/v2Go Caddy: rewrite placeholder re-expansion 6.5 Medium -
github.com/caddyserver/caddy/v2Go Caddy: stripHTML template function bypass 4.2 Medium -
github.com/caddyserver/caddy/v2Go Caddy: FastCGI header normalization bypass in `forward_auth copy_headers` 8.1 High -
github.com/caddyserver/caddy/v2Go Caddy: Windows `file_server` path authorization bypass via encoded backslash 7.5 High -
github.com/caddyserver/caddy/v2Go Caddy: Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path Matching 4.3 Medium -
github.com/caddyserver/caddy/v2Go Caddy CVE-2026-30852 Fix Bypass 5.5 Medium -
github.com/caddyserver/caddy/v2Go Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization 5.4 Medium -
github.com/caddyserver/caddy/v2Go Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files 8.1 High -
github.com/caddyserver/caddy/v2Go Caddy: vars_regexp double-expands user input, leaking env vars and files 5.5 Medium -
github.com/caddyserver/caddy/v2Go Caddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privilege Escalation 8.1 High -
github.com/caddyserver/caddy/v2Go Caddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport 8.9 High -
github.com/caddyserver/caddy/v2Go Caddy vulnerable to cross-origin config application via local admin API /load (caddy) 6.9 Medium -
github.com/caddyserver/caddy/v2Go Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass 7.7 High -
github.com/caddyserver/caddy/v2Go Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass 7.7 High -
github.com/caddyserver/caddy/v2Go Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed 8.8 High -
github.com/caddyserver/caddy/v2Go Caddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections 6.9 Medium -
github.com/caddyserver/caddy/v2Go Open Redirect in Caddy 6.1 Medium -
github.com/caddyserver/caddy/v2Go Open redirect in caddy 6.1 Medium