Caddy · week of 26 Oct 2026

Caddy security note

Records on this stack that changed between 26 Oct 2026 and the following Monday. Versions come from the stored ranges. A quiet week is not proof the stack is clear.

What changed

CVE-2026-55458 — Open the advisory
Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through
Fixed in 2.11.5 · 1 other ranges on the advisory

What we still do not know

Every changed record in this note has a version range.

Share this note

Caddy security note, week of 26 Oct 2026: 1 record has a version a customer can check, and 0 still do not. https://zerodayfindings.com/technologies/caddy/notes/2026-W44