caddy

a project Every site on HTTPS Caddy is an extensible server platform that uses TLS by default. Releases · Documentation · Get Help Powered by Special thanks to: Warp, built for coding with multiple AI agents Available for MacOS, Linux, & Windows Menu Features Install Build from source For...

CLEANSTART-2026-WK22640 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

CLEANSTART-2026-UL03599 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

CLEANSTART-2026-DI50489 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

CLEANSTART-2026-CJ43596 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

UBUNTU-CVE-2026-52844

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat /private\secret.txt as outside /private/, but fileserver later resolves the same request path as private\secret.txt on disk. An unauthenticated remote client can bypass Caddy...

UBUNTU-CVE-2026-45692

Caddy is an extensible server platform that uses TLS by default. From 2.4.0 until 2.11.3, the authorization layer and the /config traversal layer do not agree on what object the path refers to. In this case, a path authorized for one config object is accepted, but then resolves to a different...

2026-05 .NET 9.0.16 Security Update for x64 Server (KB5093448)

2026-05 .NET 9.0.16 Security Update for x64 Server KB5093448...

CVE-2026-27589

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the local caddy admin API default listen 127.0.0.1:2019 exposes a state-changing POST /load endpoint that replaces the entire running configuration. When origin enforcement is not enabled enforceorigin not...

VulnCheck KEV: CVE-2024-7694

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server...

mXSS (mutation Cross-Site Scripting) dompurify Dependency in Jira Software Data Center and Server

This is a vulnerability in a non-Atlassian Jira dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity nesting-based mXSS mutation Cross-Site Scripting vulnerability was introduced in version 10.3.0 of Jira Software Data Center...

EUVD-2018-4176

Malware in sbrugna...

EUVD-2017-14783

Malware in sbrugna...

EUVD-2018-4125

Malware in sbrugna...

EUVD-2025-24439

Malicious code in bioql PyPI...

The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) and the software for remote management and monitoring of the Intel Server Platform Services (SPS) are related to manipulating an unknown input, resulting in a timing mismatch that allows a perpetrator to disclose protected information.

The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine CSME and the software for remote management and monitoring of the Intel Server Platform Services SPS are related to manipulating an unknown input, resulting in a timin...

CVE-2025-20067

Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20067

Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...

Intel SPS和Intel CSME 安全漏洞

Intel SPS and Intel CSME are both products of Intel Corporation Intel, U.S.A. Intel SPS is a server platform service. Intel CSME is a converged security management engine. A security vulnerability exists in Intel SPS and Intel CSME that stems from an observable time difference that could lead to...

2025.3 IPU, Intel® Chipset Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Converged Security and Manageability Engine CSME, Intel® Server Platform Services Intel® SPS, Intel® Active Management Technology AMT, and Intel® Standard Manageability may allow information disclosure or escalation of privilege. Intel is...