Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/19 8:29 p.m.23 views

Caddy Defender trusted proxy client IP bypass

Impact Caddy Defender used r.RemoteAddr when evaluating whether a request should be blocked. RemoteAddr is the address of the immediate peer connected to Caddy. In deployments where Caddy is behind a trusted proxy, CDN, or load balancer, the immediate peer is usually the proxy, not the original...

8.2CVSS5.8AI score0.0016EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder