755 matches found
PT-2026-21772
Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.1 Description Caddy’s HTTP path request matcher is intended to be case-insensitive, but when the match pattern contains percent-escape sequences %xx it compares against the request's escaped path without lowercasin...
PT-2026-21773
Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.1 Description Caddy’s HTTP host request matcher is documented as case-insensitive, but becomes case-sensitive when configured with a large host list more than 100 entries due to an optimized matching path. An...
PT-2026-21774
Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.1 Description The local Caddy admin API, listening by default on 127.0.0.1:2019, includes a POST /load endpoint that allows replacing the entire running configuration. When origin enforcement is not enabled enforce...
CVE-2025-64702 vulnerabilities
Vulnerabilities for packages: seaweedfs-fips, dkron-fips, kubernetes-dns-node-cache-fips, caddy, q, spegel, teleport, k8sgateway-fips, syncthing, eks-distro-fips, k8sgateway, rke2-runtime, traefik-fips, seaweedfs, buf, traefik, kubo, caddy-fips, kubo-fips, ipfs-cluster-fips, frp, eks-distro, karg...
GHSA-G754-HX8W-X2G6 vulnerabilities
Vulnerabilities for packages: seaweedfs-fips, dkron-fips, kubernetes-dns-node-cache-fips, caddy, q, spegel, teleport, k8sgateway-fips, syncthing, eks-distro-fips, k8sgateway, rke2-runtime, traefik-fips, seaweedfs, buf, traefik, kubo, caddy-fips, kubo-fips, ipfs-cluster-fips, frp, eks-distro, karg...
CVE-2025-44005 vulnerabilities
Vulnerabilities for packages: caddy...
GHSA-H8CP-697H-8C8P vulnerabilities
Vulnerabilities for packages: caddy...
CVE-2025-66406 vulnerabilities
Vulnerabilities for packages: caddy...
GHSA-J7C9-79X7-8HPR vulnerabilities
Vulnerabilities for packages: caddy...
GHSA-J7C9-79X7-8HPR vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...
GHSA-H8CP-697H-8C8P vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...
CVE-2025-66406 vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...
CVE-2025-44005 vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...
Fedora: Security Advisory (FEDORA-2025-89401f2116)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-X6FH-7QMF-69XH vulnerabilities
Vulnerabilities for packages: step-issuer, step-ca, caddy, step...
CVE-2025-62820 vulnerabilities
Vulnerabilities for packages: step-issuer, step-ca, caddy, step...
CVE-2025-62820 vulnerabilities
Vulnerabilities for packages: step, step-fips, step-ca-fips, step-issuer, caddy, step-issuer-fips, step-ca, caddy-fips...
GHSA-X6FH-7QMF-69XH vulnerabilities
Vulnerabilities for packages: step, step-fips, step-ca-fips, step-issuer, caddy, step-issuer-fips, step-ca, caddy-fips...