github.com/caddyserver/caddy/v2/modules/caddyhttp/reverseproxy vulnerabilities (Go)

1 vulnerability.

• github.com/caddyserver/caddy/v2/modules/caddyhttp/reverseproxy Go Caddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privilege Escalation CVE-2026-30851 Fix available 8.1 HighMarch 6, 2026