755 matches found
PT-2026-21767
Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.1 Description The path sanitization routine in Caddy's file matcher does not properly sanitize backslashes, potentially allowing bypass of path-related security protections. This issue affects users with specific...
PT-2026-21774
Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.1 Description The local Caddy admin API, listening by default on 127.0.0.1:2019, includes a POST /load endpoint that allows replacing the entire running configuration. When origin enforcement is not enabled enforce...
PT-2026-21773
Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.1 Description Caddy’s HTTP host request matcher is documented as case-insensitive, but becomes case-sensitive when configured with a large host list more than 100 entries due to an optimized matching path. An...
CVE-2025-64702 vulnerabilities
Vulnerabilities for packages: seaweedfs-fips, dkron-fips, kubernetes-dns-node-cache-fips, caddy, q, spegel, teleport, k8sgateway-fips, syncthing, eks-distro-fips, k8sgateway, rke2-runtime, traefik-fips, seaweedfs, buf, traefik, kubo, caddy-fips, kubo-fips, ipfs-cluster-fips, frp, eks-distro, karg...
GHSA-G754-HX8W-X2G6 vulnerabilities
Vulnerabilities for packages: seaweedfs-fips, dkron-fips, kubernetes-dns-node-cache-fips, caddy, q, spegel, teleport, k8sgateway-fips, syncthing, eks-distro-fips, k8sgateway, rke2-runtime, traefik-fips, seaweedfs, buf, traefik, kubo, caddy-fips, kubo-fips, ipfs-cluster-fips, frp, eks-distro, karg...
CVE-2025-44005 vulnerabilities
Vulnerabilities for packages: caddy...
GHSA-H8CP-697H-8C8P vulnerabilities
Vulnerabilities for packages: caddy...
CVE-2025-66406 vulnerabilities
Vulnerabilities for packages: caddy...
GHSA-J7C9-79X7-8HPR vulnerabilities
Vulnerabilities for packages: caddy...
GHSA-J7C9-79X7-8HPR vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...
CVE-2025-66406 vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...
GHSA-H8CP-697H-8C8P vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...
CVE-2025-44005 vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...
Fedora: Security Advisory (FEDORA-2025-89401f2116)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-X6FH-7QMF-69XH vulnerabilities
Vulnerabilities for packages: step-issuer, step-ca, caddy, step...
CVE-2025-62820 vulnerabilities
Vulnerabilities for packages: step-issuer, step-ca, caddy, step...
CVE-2025-62820 vulnerabilities
Vulnerabilities for packages: step, step-fips, step-ca-fips, step-issuer, caddy, step-issuer-fips, step-ca, caddy-fips...
GHSA-X6FH-7QMF-69XH vulnerabilities
Vulnerabilities for packages: step, step-fips, step-ca-fips, step-issuer, caddy, step-issuer-fips, step-ca, caddy-fips...