EUVD-2023-49405

Malicious code in bioql PyPI...

EUVD-2022-5889

Malicious code in bioql PyPI...

Malicious code in test-mlw2-caddy-erose (npm)

The package test-mlw2-caddy-erose was found to contain malicious code...

MAL-2025-35021 Malicious code in test-mlw2-caddy-erose (npm)

The package test-mlw2-caddy-erose was found to contain malicious code...

📄 Caddy 2.10.0 Server-Side Request Forgery

Caddy version 2.10.0 suffers from a server-side request forgery vulnerability via a JSON configuration injection. Exploit Title: Caddy 2.10.0 - Admin API SSRF via JSON Config Injection Date: 2025-07-10 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://caddyserver.com/ Software Link:...

GHSA-VRW8-FXC6-2R93 vulnerabilities

Vulnerabilities for packages: karma, kyverno-policy-reporter-ui, step-ca, gogatekeeper, step, step-issuer, tkn, gitness, caddy, cloudflared, buf, rclone, sftpgo...

Fedora 42 : caddy (2025-4518c12e2f)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4518c12e2f advisory. Update to version 2.10.0. Aside from the new upstream features, this update also refreshes many bundled dependencies, fixing a few CVEs...

Fedora 43 : caddy (2025-89401f2116)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-89401f2116 advisory. Update to version 2.10.0. Aside from the new upstream features, this update also refreshes many bundled dependencies, fixing a few CVEs...

Fedora: Security Advisory (FEDORA-2025-4518c12e2f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-21493

All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affected library do not validate whether their input values are nil before attempting to access elements, which can lead ...

CVE-2024-21496

All versions of the package github.com/greenpau/caddy-security are vulnerable to Cross-site Scripting XSS via the Referer header, due to improper input sanitization. Although the Referer header is sanitized by escaping some characters that can allow XSS e.g., &, , ", ', it does not account for th...

[SECURITY] Fedora 42 Update: caddy-2.10.0-1.fc42

Caddy is an extensible server platform that uses TLS by default...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: guac, skopeo, restic, controller-gen, s5cmd, redka, linkerd2-proxy-init, rabbitmq-cluster-operator, govulncheck, cni-plugins, actions-runner-controller, harbor-scanner-trivy, aws-privateca-issuer, prometheus-blackbox-exporter, glab, wave, spqr,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: guac, skopeo, restic, controller-gen, s5cmd, redka, linkerd2-proxy-init, rabbitmq-cluster-operator, govulncheck, cni-plugins, actions-runner-controller, harbor-scanner-trivy, aws-privateca-issuer, prometheus-blackbox-exporter, glab, wave, spqr,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: buildah, containerd, kyverno-notation-aws, kserve-modelmesh-serving, kubernetes-csi-external-provisioner, thanos-fips, runc-fips, argo-cd, git-credential-oauth, rancher-webhook, yq-fips, wgcf, nri-apache, cloudnative-pg, harbor-registry, skopeo-fips, petname,...

openSUSE Security Advisory (openSUSE-SU-2024:0220-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-45339 vulnerabilities

Vulnerabilities for packages: opa, step, step-issuer, kyverno-notation-aws, spark-operator, kubeflow, caddy, cert-exporter-fips, smarter-device-manager-fips, step-ca-fips, step-fips, caddy-fips, spark-operator-fips, kyverno-fips, pulumi-language-yaml, flux-image-reflector-controller,...

GHSA-PX8V-PP82-RCVR vulnerabilities

Vulnerabilities for packages: cloudflared, eks-distro-fips, caddy-fips, spegel, kubernetes-dns-node-cache, traefik, traefik-fips, frp, buf, k3s, eks-distro, q, caddy, kubernetes-dns-node-cache-fips...

GHSA-PX8V-PP82-RCVR vulnerabilities

Vulnerabilities for packages: spegel, k3s, frp, q, caddy, cloudflared, buf, kubernetes-dns-node-cache...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: cloudflared, eks-distro-fips, caddy-fips, spegel, kubernetes-dns-node-cache, traefik, traefik-fips, frp, buf, k3s, eks-distro, q, caddy, kubernetes-dns-node-cache-fips...