caddy

a project Every site on HTTPS Caddy is an extensible server platform that uses TLS by default. Releases · Documentation · Get Help Powered by Special thanks to: Warp, built for coding with multiple AI agents Available for MacOS, Linux, & Windows Menu Features Install Build from source For...

CLEANSTART-2026-WK22640 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

CLEANSTART-2026-UL03599 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

CLEANSTART-2026-DI50489 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

CLEANSTART-2026-CJ43596 Caddy is an extensible server platform that uses TLS by default

Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...

UBUNTU-CVE-2026-52844

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat /private\secret.txt as outside /private/, but fileserver later resolves the same request path as private\secret.txt on disk. An unauthenticated remote client can bypass Caddy...

UBUNTU-CVE-2026-45692

Caddy is an extensible server platform that uses TLS by default. From 2.4.0 until 2.11.3, the authorization layer and the /config traversal layer do not agree on what object the path refers to. In this case, a path authorized for one config object is accepted, but then resolves to a different...

2026-05 .NET 9.0.16 Security Update for x64 Server (KB5093448)

2026-05 .NET 9.0.16 Security Update for x64 Server KB5093448...

CVE-2026-27589

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the local caddy admin API default listen 127.0.0.1:2019 exposes a state-changing POST /load endpoint that replaces the entire running configuration. When origin enforcement is not enabled enforceorigin not...

VulnCheck KEV: CVE-2024-7694

TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files,...

mXSS (mutation Cross-Site Scripting) dompurify Dependency in Jira Software Data Center and Server

This is a vulnerability in a non-Atlassian Jira dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity nesting-based mXSS mutation Cross-Site Scripting vulnerability was introduced in version 10.3.0 of Jira Software Data Center...

EUVD-2018-4176

Malware in sbrugna...

EUVD-2018-4125

Malware in sbrugna...

EUVD-2017-14783

Malware in sbrugna...

EUVD-2025-24439

Malicious code in bioql PyPI...

remote management and monitoring Information Disclosure

The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine CSME and the software for remote management and monitoring of the Intel Server Platform Services SPS are related to manipulating an unknown input, resulting in a timin...

CVE-2025-20067

Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20067

Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...

Intel SPS and Intel CSME security vulnerabilities

Intel SPS and Intel CSME are both products of Intel Corporation Intel, U.S.A. Intel SPS is a server platform service. Intel CSME is a converged security management engine. A security vulnerability exists in Intel SPS and Intel CSME that stems from an observable time difference that could lead to...

PT-2025-32698

Name of the Vulnerable Software and Affected Versions: IntelR CSME and IntelR SPS affected versions not specified Description: An observable timing discrepancy in firmware may allow a privileged user to potentially enable information disclosure via local access. Recommendations: At the moment,...