PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/caddyserver/caddy/v2 Caddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass Medium Risk 6.5 13 days ago 6 hours ago
github.com/caddyserver/caddy/v2 Vulnerabilities in handler/placeholder layer in github.com/caddyserver/caddy Unknown 7 hours ago 6 hours ago
github.com/caddyserver/caddy/v2 Open Redirect in Caddy Medium Risk 6.1 3 years ago 21 days ago
github.com/caddyserver/caddy/v2 Open redirect in caddy Medium Risk 6.1 4 years ago 21 days ago
github.com/caddyserver/caddy/v2 Caddy: Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path Matching Medium Risk 4.3 4 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy CVE-2026-30852 Fix Bypass Medium Risk 6.0 4 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy: stripHTML template function bypass Medium Risk 4.2 3 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy: FastCGI header normalization bypass in `forward_auth copy_headers` High Risk 8.1 3 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files High Risk 8.1 4 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy: Windows `file_server` path authorization bypass via encoded backslash High Risk 7.5 3 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy: stripHTML template function bypass in github.com/caddyserver/caddy Unknown 2 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy CVE-2026-30852 Fix Bypass in github.com/caddyserver/caddy Unknown 2 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy: Windows file server path authorization bypass via encoded backslash in github.com/caddyserver/caddy Unknown 2 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files in github.com/caddyserver/caddy Unknown 2 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy: FastCGI header normalization bypass in forward_auth copy_headers in github.com/caddyserver/caddy Unknown 2 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy: Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path Matching in github.com/caddyserver/caddy Unknown 2 months ago 2 months ago
github.com/caddyserver/caddy/v2 Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization Medium Risk 5.4 4 months ago 2 months ago
github.com/caddyserver/caddy/v2 Remote Admin Authorization Bypass in "/config" API via Array Index Normalization in github.com/caddyserver/caddy Unknown 2 months ago 2 months ago
github.com/caddyserver/caddy/v2/modules/caddyhttp/reverseproxy Caddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privilege Escalation High Risk 8.1 6 months ago 6 months ago
github.com/caddyserver/caddy/v2/modules/caddyhttp Caddy's vars_regexp double-expands user input, leaking env vars and files Medium Risk 6.0 6 months ago 6 months ago
github.com/caddyserver/caddy/v2 Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy Unknown 6 months ago 6 months ago
github.com/caddyserver/caddy/v2 Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy Unknown 6 months ago 6 months ago
github.com/caddyserver/caddy/v2 Caddy: Unicode case-folding length expansion causes incorrect split_path index in FastCGI transport High Risk 8.0 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Caddy is vulnerable to cross-origin config application via local admin API /load Medium Risk 6.0 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass High Risk 8.0 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass High Risk 8.0 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Caddy: mTLS client authentication silently fails open when CA certificate file is missing or malformed High Risk 8.0 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Caddy: Improper sanitization of glob characters in file matcher may lead to bypassing security protections Medium Risk 6.0 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2 Unknown 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2 Unknown 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Improper sanitization of glob characters in github.com/caddyserver/caddy/v2 Unknown 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2 Unknown 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2 Unknown 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2 Unknown 7 months ago 7 months ago
github.com/caddyserver/caddy/v2 Open redirect in github.com/caddyserver/caddy/v2 Unknown 3 years ago 8 months ago
Data courtesy of OSV.dev
Page 1