Caddy vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
19 matching records
- LowCaddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak throughOpen the advisoryOct 13, 2026
- Medium6.5Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.49%Sep 17, 2026
- MediumConnection created for the wrong upstream for forward_auth + reverse_proxyOpen the advisoryJul 10, 2026
- High8.1Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.45%Jun 8, 2026
- High7.5Windows path authorization bypass via encoded backslashCheck if you run itEPSS 0.62%Jun 8, 2026
- Medium4.2Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.25%Jun 8, 2026
- Medium4.3Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path MatchingOpen the advisoryMay 13, 2026
- Medium5.4Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.24%May 13, 2026
- HighGHSA-wwhq-w58m-w29c is listed by Caddy CVE-2026-30852 Fix Bypass.Open the advisoryMay 13, 2026
- HighUnsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP FilesCheck if you run itEPSS 0.68%May 13, 2026
- Medium5.5Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.44%Mar 6, 2026
- High8.8Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.26%Mar 6, 2026
- High8.8Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.29%Feb 23, 2026
- Critical9.1Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.43%Feb 23, 2026
- Critical9.1Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.43%Feb 23, 2026
- Medium6.9Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.19%Feb 23, 2026
- Critical9.8Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.61%Feb 23, 2026
- Medium6.9Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.37%Feb 23, 2026
- Unknowncaddy_project caddy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.03%Jan 26, 2022
Sort
19 records