Skip to content
OpenAdvisories

Package · Go

github.com/caddyserver/caddy

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.2
    CVE-2026-52846

    Caddy: stripHTML template function bypass

    Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, Caddy’s stripHTML template function cannot reliably remove all HTML tags from input strings. Certain malformed HTML, such as <<>img src=x onerror=alert()>, can bypass the tag-st…

    caddyserver caddy github.com/caddyserver/caddy/v2 caddy Debian Ubuntu Go
  • Medium 6.1
    CVE-2022-29718

    Open redirect in caddy

    Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.

    github.com/caddyserver/caddy/v2 github.com/caddyserver/caddy Go