CVE-2024-21496

All versions of the package github.com/greenpau/caddy-security are vulnerable to Cross-site Scripting XSS via the Referer header, due to improper input sanitization. Although the Referer header is sanitized by escaping some characters that can allow XSS e.g., &, , ", ', it does not account for th...

[SECURITY] Fedora 42 Update: caddy-2.10.0-1.fc42

Caddy is an extensible server platform that uses TLS by default...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: thanos-operator, malcontent, helm-push, kubernetes-csi-external-provisioner, velero, nri-rabbitmq, fulcio, amazon-k8s-cni, octo-sts, azcopy, esbuild, hey, gomplate, gke-gcloud-auth-plugin, kyverno-policy-reporter-kyverno-plugin, litefs, rootlesskit, prometheus-adapte...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: thanos-operator, malcontent, helm-push, kubernetes-csi-external-provisioner, velero, nri-rabbitmq, fulcio, amazon-k8s-cni, octo-sts, azcopy, esbuild, hey, gomplate, gke-gcloud-auth-plugin, kyverno-policy-reporter-kyverno-plugin, litefs, rootlesskit, prometheus-adapte...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, knative-operator, opencost-fips, azure-service-operator, kserve-modelmesh-serving, harbor-registry, cargobump, cilium, sbom-convert, cadvisor, clickhouse-operator-fips, incert, node-problem-detector, openbao-k8s-fips, argo-cd,...

openSUSE Security Advisory (openSUSE-SU-2024:0220-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-45339 vulnerabilities

Vulnerabilities for packages: opa, kubeflow-fips, nfs-subdir-external-provisioner, crossplane-provider-gcp, opa-fips, skaffold, cert-exporter-fips, cert-exporter, grafana-mimir, caddy, pulumi-language-yaml, amass, smarter-device-manager-fips, spark-operator, portieris-fips,...

GHSA-PX8V-PP82-RCVR vulnerabilities

Vulnerabilities for packages: k3s, eks-distro-fips, frp, traefik-fips, eks-distro, caddy, cloudflared, buf, kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache, q, spegel, traefik, caddy-fips...

GHSA-PX8V-PP82-RCVR vulnerabilities

Vulnerabilities for packages: q, spegel, frp, cloudflared, kubernetes-dns-node-cache, caddy, k3s, buf...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: k3s, eks-distro-fips, frp, traefik-fips, eks-distro, caddy, cloudflared, buf, kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache, q, spegel, traefik, caddy-fips...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: q, spegel, frp, cloudflared, kubernetes-dns-node-cache, caddy, k3s, buf...

Fedora 41 : caddy (2024-bd8fe42929)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-bd8fe42929 advisory. Automatic update for caddy-2.8.4-1.fc41. Changelog Fri Jul 5 2024 Carl George - 2.8.4-1 - Update to version 2.8.4 rhbz2278549 - Resolves...

Fedora: Security Advisory (FEDORA-2024-19d093c14d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-57b1499122)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-5effef25a3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for caddy (moderate)

openSUSE Security Update: Security update for caddy Announcement ID: openSUSE-SU-2024:0220-1 Rating: moderate References: 1222468 Cross-References: CVE-2023-45142 CVE-2024-22189 CVSS scores: CVE-2023-45142 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-45142 SUSE: 7.5...

OPENSUSE-SU-2024:0220-1 Security update for caddy

This update for caddy fixes the following issues: - Update to version 2.8.4: cmd: fix regression in auto-detect of Caddyfile 6362 Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped - Update to version 2.8.2: cmd: fix auto-detetction of .caddyfile extension 6356 caddyhttp: properly...

openSUSE 15 Security Update : caddy (openSUSE-SU-2024:0211-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0211-1 advisory. Update to version 2.8.4: cmd: fix regression in auto-detect of Caddyfile 6362 Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped...

openSUSE Security Advisory (openSUSE-SU-2024:0211-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:0211-1 Security update for caddy

This update for caddy fixes the following issues: Update to version 2.8.4: cmd: fix regression in auto-detect of Caddyfile 6362 Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped Update to version 2.8.2: cmd: fix auto-detetction of .caddyfile extension 6356 caddyhttp: properly...