Vuln
·
Scope
Home
Packages
KEV
Critical
Insights
EN
中
Loading…
Debian/caddy — 12 CVEs · VulnScope
pkg:Debian/
caddy
12 total CVEs
CRITICAL
4
MEDIUM
4
✅ Check your installed version
Check
All known vulnerabilities
CRITICAL
9.8
CVE-2026-27590
Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2
from 0
CRITICAL
9.1
CVE-2026-27588
Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2
from 0
CRITICAL
9.1
CVE-2026-27587
Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2
from 0
CRITICAL
9.1
Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2
from 0
MEDIUM
6.5
Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2
from 0
MEDIUM
6.5
Improper sanitization of glob characters in github.com/caddyserver/caddy/v2
from 0
MEDIUM
6.1
Open redirect in github.com/caddyserver/caddy/v2
from 0, < 2.5.2-1
MEDIUM
4.2
Caddy: stripHTML template function bypass
from 0
CVE-2026-27586
CVE-2026-27589
CVE-2026-27585
CVE-2022-28923
CVE-2026-52846
Show all 12 CVEs