OPENSUSE-SU-2024:13495-1 caddy-2.7.6-1.1 on GA media

These are all security issues fixed in the caddy-2.7.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12220-1 caddy-2.5.2-2.1 on GA media

These are all security issues fixed in the caddy-2.5.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12132-1 caddy-2.5.1-2.1 on GA media

These are all security issues fixed in the caddy-2.5.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14014-1 caddy-2.8.4-1.1 on GA media

These are all security issues fixed in the caddy-2.8.4-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 40 : caddy (2023-57b1499122)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-57b1499122 advisory. Automatic update for caddy-2.7.4-1.fc40. Changelog Thu Aug 17 2023 Carl George - 2.7.4-1 - Update to version 2.7.4, resolves rhbz2232696 - Fix CVE-2023-3978,...

Fedora 40 : caddy (2024-19d093c14d)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-19d093c14d advisory. Automatic update for caddy-2.7.6-1.fc40. Changelog Fri Feb 9 2024 Carl George - 2.7.6-1 - Update to version 2.7.6 rhbz2253698 - Includes fix for CVE-2023-451...

CVE-2024-22189 vulnerabilities

Vulnerabilities for packages: cloudflared, k3s, caddy, q...

GHSA-C33X-XQRF-C478 vulnerabilities

Vulnerabilities for packages: cloudflared, k3s, caddy, q...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: step, kine, temporal-server, wavefront-collector-for-kubernetes, caddy, ferretdb, spicedb, trillian, caddy-fips, k3s, step-ca, amass, src, argo-workflows-fips, argo-workflows, kube-bench, kube-bench-fips, temporal-server-fips, kots, trillian-fips, falcosidekick-fips...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kube-bench, amass, spicedb, k3s, step-ca, step, kine, src, ferretdb, kots, caddy, temporal-server, trillian, argo-workflows...

CVE-2024-27289 vulnerabilities

Vulnerabilities for packages: step-ca, step, kots, caddy, trillian, argo-workflows...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: kube-bench, amass, spicedb, k3s, step-ca, step, kine, src, ferretdb, kots, caddy, temporal-server, trillian, argo-workflows...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: step, kine, temporal-server, wavefront-collector-for-kubernetes, caddy, ferretdb, spicedb, trillian, caddy-fips, k3s, step-ca, amass, src, argo-workflows-fips, argo-workflows, kube-bench, kube-bench-fips, temporal-server-fips, kots, trillian-fips, falcosidekick-fips...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: step, kine, temporal-server, wavefront-collector-for-kubernetes, caddy, ferretdb, spicedb, trillian, caddy-fips, k3s, step-ca, amass, src, argo-workflows-fips, argo-workflows, kube-bench, kube-bench-fips, temporal-server-fips, kots, trillian-fips, falcosidekick-fips...

GHSA-M7WR-2XF7-CM9P vulnerabilities

Vulnerabilities for packages: trillian, argo-workflows-fips, caddy-fips, step, argo-workflows, kots, step-ca, wavefront-collector-for-kubernetes, trillian-fips, caddy...

openSUSE: Security Advisory for caddy (openSUSE-SU-2022:10080-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for caddy (openSUSE-SU-2022:10007-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-22b915e51a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Improper Restriction Of Excessive Authentication Attempts

github.com/greenpau/caddy-security is vulnerable to Improper Restriction of Excessive Authentication Attempts via the two-factor authentication 2FA. The vulnerability is due to improper 2FA timeout functionality, allowing an attackers to bypass this blocking mechanism by automating the...

HTTP Header Injection

github.com/greenpau/caddy-security is vulnerable to HTTP Header Injection. The vulnerability is due the handling of the X-Forwarded-Proto header, specifically when redirecting to the injected protocol. Exploiting this vulnerability could lead to the bypass of security mechanisms or TLS protocol...