Skip to content
OpenAdvisories

Package · Go

github.com/mholt/caddy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2018-21246

    Caddy vulnerable to Authentication Bypass due to mishandling of TLS client authentication

    Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode.

    github.com/caddyserver/caddy github.com/mholt/caddy Go