Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/02/24 8:22 p.m.•20 views

Caddy: mTLS client authentication silently fails open when CA certificate file is missing or malformed

Summary Two swallowed errors in ClientAuthentication.provision cause mTLS client certificate authentication to silently fail open when a CA certificate file is missing, unreadable, or malformed. The server starts without error but accepts any client certificate signed by any system-trusted CA,...

9.3CVSS7.8AI score0.00398EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder