pkg:Go/github.com/caddyserver/caddy

All known vulnerabilities

• CRITICAL9.8CVE-2018-21246Authentication bypass in github.com/mholt/caddy
  from 0, < 0.10.13
• HIGH8.1CVE-2026-52845Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`
  from 0, <= 1.0.5
• HIGH7.5CVE-2026-52844Caddy: Windows `file_server` path authorization bypass via encoded backslash
  from 0, <= 1.0.5
• HIGH7.5Withdrawn Advisory: Out-of-bounds Read can lead to client side denial of service
  from 0, < 2.5.2
• MEDIUM6.1Open redirect in caddy
  from 0, < 2.5.0
• MEDIUM4.2Caddy: stripHTML template function bypass
  from 0, <= 1.0.5
• LOW3.7Caddy allows enumeration of Certificates and Hostnames
  from 0, < 0.11.1