WS-2026-0167

istio 1.2.0-rc.0 - 1.28.10 all EOL lines, no fix, 1.29.0-alpha.0 - 1.29.8, 1.30.0-alpha.1 - 1.30.5, 1.31.0-alpha.0 - 1.31.1, 1.32.0-alpha.0: AuthorizationPolicy methods/notMethods rules compile to a case-sensitive :method matcher, so an HTTP/2 request with a different-case method bypasses DENY or...

Caddy security vulnerabilities

Caddy is an open-source, cross-platform HTTP/Web server developed by the Caddy company. Versions of Caddy prior to 2.11.1 contained security vulnerabilities. These vulnerabilities stemmed from the HTTP host request matcher becoming case-sensitive when configuring large host lists, which could all...