caddyserver caddy

• CVE-2026-55458 Low 2.9 Caddy: RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through 0.5%
• CVE-2026-92700 Medium 6.3 Caddy: fileHidden() case-sensitive pattern bypass — exposes "hidden" files via case variation 0.4%
• CVE-2026-92284 Medium 6.9 Caddy: Unbounded body buffer via {http.request.body} placeholder — memory exhaustion DoS 0.4%
• CVE-2026-77281 Medium 6.5 Caddy: rewrite placeholder re-expansion 0.5%
• CVE-2026-45135 High 8.1 Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files 0.7%
• CVE-2026-45692 Medium 5.4 Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization 0.2%
• CVE-2026-52845 High 8.1 Caddy: FastCGI header normalization bypass in `forward_auth copy_headers` 0.4%
• CVE-2026-52844 High 7.5 Caddy: Windows `file_server` path authorization bypass via encoded backslash 0.6%
• CVE-2026-52846 Medium 4.2 Caddy: stripHTML template function bypass 0.2%
• CVE-2026-30851 High 8.1 Caddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privilege Escalation 0.3%
• CVE-2026-30852 Medium 5.5 Caddy: vars_regexp double-expands user input, leaking env vars and files 0.5%
• CVE-2026-27590 High 8.9 Caddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport 0.6%
• CVE-2026-27589 Medium 6.9 Caddy vulnerable to cross-origin config application via local admin API /load (caddy) 0.2%
• CVE-2026-27588 High 7.7 Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass 0.4%
• CVE-2026-27587 High 7.7 Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass 0.4%
• CVE-2026-27586 High 8.8 Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed 0.3%
• CVE-2026-27585 Medium 6.9 Caddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections 0.4%