Vulnerability GO-2026-6512
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
6 hours ago
October 01, 2026 at 08:23 PM UTC
Vulnerabilities in handler/placeholder layer in github.com/caddyserver/caddy
v2.0.0-beta.13 - v2.11.3
v2.0.0-beta.13 - v2.11.3
Summary
Vulnerabilities in handler/placeholder layer in github.com/caddyserver/caddy
Details
Rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass in github.com/caddyserver/caddy
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
13 days ago
Caddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass
v2.0.0-beta.13 - v2.11.3 GHSA-j8px-rmrx-76h9
v2.0.0-beta.13 - v2.11.3 GHSA-j8px-rmrx-76h9
Unknown
2 months ago
Caddy: FastCGI header normalization bypass in forward_auth copy_headers in github.com/caddyserver/caddy
v2.0.0-beta.13 - v2.11.3 GO-2026-5346
v2.0.0-beta.13 - v2.11.3 GO-2026-5346
Unknown
2 months ago
Caddy: Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path Matching in github.com/caddyserver/caddy
v2.0.0-beta.13 - v2.11.2 GO-2026-5408
v2.0.0-beta.13 - v2.11.2 GO-2026-5408
Unknown
2 months ago
Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files in github.com/caddyserver/caddy
v2.7.0 - v2.11.2 GO-2026-5492
v2.7.0 - v2.11.2 GO-2026-5492
Unknown
2 months ago
Caddy: Windows file server path authorization bypass via encoded backslash in github.com/caddyserver/caddy
v2.0.0-beta.13 - v2.11.3 GO-2026-5595
v2.0.0-beta.13 - v2.11.3 GO-2026-5595
Impacted packages
Timeline
Published
6 hours ago
October 01, 2026 at 08:23 PM UTC
Last Modified
6 hours ago
October 01, 2026 at 08:55 PM UTC