622 matches found
Caddy 2.4.6 - Open Redirect
Caddy 2.4.6 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site via a crafted URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-28923 info: name: Caddy 2.4.6 - Open Redirect author: Sascha...
GHSA-F3QQ-49M6-RW8F
creationtimestamp| type| source ---|---|--- 2026-08-19 08:31:37+00:00| seen| https://gist.github.com/alon710/db3f4019c2372dbb6dfede560d6093f7...
CVE-2026-45135
A flaw was found in Caddy. This vulnerability stems from unsafe handling of Unicode characters within the FastCGI component, specifically when processing request paths containing non-ASCII bytes. An attacker capable of placing content into files served via FastCGI can exploit this by crafting a...
GO-2025-4180 vulnerabilities
Vulnerabilities for packages: caddy-fips, caddy...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: step, step-ca, step-fips, caddy-fips, caddy, step-issuer-fips, step-ca-fips, step-issuer...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: buf, step-ca-fips, step-issuer, rclone-fips, step, step-ca, karma, sftpgo, kyverno-policy-reporter-ui, dapr-fips, caddy-fips, tkn-fips, cloudflared, caddy, kyverno-policy-reporter-ui-fips, gogatekeeper, gitness, dapr, step-fips, rclone, telegraf, tkn, step-issuer-fip...
GO-2023-2113 vulnerabilities
Vulnerabilities for packages: k3s, kube-oidc-proxy, prometheus-adapter, rancher-webhook-fips, buildkitd, kubevela, kubernetes-fips, rancher-webhook, caddy, up, kubernetes, metrics-server-fips...
GO-2026-4458 vulnerabilities
Vulnerabilities for packages: step, step-ca, step-fips, caddy-fips, caddy, step-issuer-fips, step-ca-fips, step-issuer...
GO-2024-3302 vulnerabilities
Vulnerabilities for packages: k3s, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, caddy-fips, frp, buf, eks-distro, eks-distro-fips, cloudflared, q, caddy, spegel, traefik, traefik-fips...
GO-2025-4181 vulnerabilities
Vulnerabilities for packages: caddy-fips, caddy...
GO-2024-2682 vulnerabilities
Vulnerabilities for packages: k3s, caddy-fips, cloudflared, q, caddy...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: step-issuer-fips, frankenphp-8.4, caddy-fips, frankenphp-8.5, frankenphp-8.2, caddy, frankenphp-8.3, step-ca-fips...
GO-2024-2459 vulnerabilities
Vulnerabilities for packages: frp, caddy...
GO-2024-2605 vulnerabilities
Vulnerabilities for packages: kots, step, step-ca, wavefront-collector-for-kubernetes, caddy-fips, trillian, trillian-fips, argo-workflows-fips, argo-workflows, caddy...
GO-2026-5029 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, frankenphp-8.4, vault, kyverno-fips, kine, step, crossplane-provider-azure-servicelinker, etcd, argo-cd, crossplane-provider-aws-elasticache, zot, external-secrets-operator, vault-fips, kube-conformance, reports-server,...
GO-2025-3372 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, pulumi-language-dotnet, crossplane-provider-gcp, flyte, kyverno-fips, opa, step-ca-fips, opa-fips-envoy, step-issuer, kyverno-notation-aws, step, step-ca, cluster-proportional-autoscaler, pulumi-language-yaml, opa-fips, smarter-device-manager-fips,...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: caddy...
GO-2025-4180 vulnerabilities
Vulnerabilities for packages: caddy...