caddy

一个 项目 让每个站点都使用 HTTPS Caddy 是一个可扩展的服务器平台，默认使用 TLS。 版本发布 · 文档 · 获取帮助 技术支持来自 特别感谢： Warp，专为多 AI 代理协同编码而打造 支持 MacOS、Linux 和 Windows 目录 功能特性 安装 从源码构建 用于开发 包含版本信息和/或插件 快速开始 概述 完整文档 获取帮助 关于 功能特性 使用 Caddyfile 实现简单配置 使用原生 JSON 配置实现强大配置 通过 JSON API 实现动态配置 如果你不喜欢 JSON，可以使用配置适配器 默认自动 HTTPS 对公网域名使用 ZeroSSL 和...

CLEANSTART-2026-WK22640 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

CLEANSTART-2026-UL03599 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

CLEANSTART-2026-DI50489 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

CLEANSTART-2026-CJ43596 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

UBUNTU-CVE-2026-52844

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat /private\secret.txt as outside /private/, but fileserver later resolves the same request path as private\secret.txt on disk. An unauthenticated remote client can bypass Caddy...

UBUNTU-CVE-2026-45692

Caddy is an extensible server platform that uses TLS by default. From 2.4.0 until 2.11.3, the authorization layer and the /config traversal layer do not agree on what object the path refers to. In this case, a path authorized for one config object is accepted, but then resolves to a different...

2026-05 .NET 9.0.16 Security Update for x64 Server (KB5093448)

2026-05 .NET 9.0.16 Security Update for x64 Server KB5093448...

CVE-2026-27589

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the local caddy admin API default listen 127.0.0.1:2019 exposes a state-changing POST /load endpoint that replaces the entire running configuration. When origin enforcement is not enabled enforceorigin not...

VulnCheck KEV: CVE-2024-7694

TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files,...

mXSS (mutation Cross-Site Scripting) dompurify Dependency in Jira Software Data Center and Server

This is a vulnerability in a non-Atlassian Jira dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity nesting-based mXSS mutation Cross-Site Scripting vulnerability was introduced in version 10.3.0 of Jira Software Data Center...

EUVD-2017-14783

Malware in sbrugna...

EUVD-2018-4176

Malware in sbrugna...

EUVD-2018-4125

Malware in sbrugna...

EUVD-2025-24439

Malicious code in bioql PyPI...

The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) and the software for remote management and monitoring of the Intel Server Platform Services (SPS) are related to manipulating an unknown input, resulting in a timing mismatch that allows a perpetrator to disclose protected information.

The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine CSME and the software for remote management and monitoring of the Intel Server Platform Services SPS are related to manipulating an unknown input, resulting in a timin...

CVE-2025-20067

Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20067

Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...

Intel SPS和Intel CSME 安全漏洞

Intel SPS and Intel CSME are both products of Intel Corporation Intel, U.S.A. Intel SPS is a server platform service. Intel CSME is a converged security management engine. A security vulnerability exists in Intel SPS and Intel CSME that stems from an observable time difference that could lead to...

2025.3 IPU, Intel® Chipset Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Converged Security and Manageability Engine CSME, Intel® Server Platform Services Intel® SPS, Intel® Active Management Technology AMT, and Intel® Standard Manageability may allow information disclosure or escalation of privilege. Intel is...