Skip to content
OpenAdvisories

Package · Debian

caddy

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.9
    CVE-2026-55458

    Caddy: RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through

    Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.5, the reverse proxy's finalizeResponse method in modules/caddyhttp/reverseproxy/reverseproxy.go handles an upstream 101 Switching Protocols response before running removeConnectio…

    caddyserver caddy github.com/caddyserver/caddy/v2 caddy Debian Ubuntu Go