Skip to content
OpenAdvisories

Vendor

caido

5 known vulnerabilities.

caido at a glance

Last 12 months
2
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202610
Jan 202600
Dec 202500
Nov 202510
Oct 202500
Sep 202500
Aug 202500
Jul 202510
Jun 202510
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202510
Dec 202400

Products

caido 5
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 8.1
    CVE-2026-24853

    Caido has an insufficient patch for DNS rebind leading to RCE

    Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: …

    caido caido
  • Medium 4.3
    CVE-2025-66025

    Caido Improperly Handles External Links in Markdown

    Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a find…

    caido caido
  • Medium 6.3
    CVE-2025-53834

    Caido Toast Vulnerable to Reflected Cross-site Scripting

    Caido is a web security auditing toolkit. A reflected cross-site scripting (XSS) vulnerability was discovered in Caido’s toast UI component in versions prior to 0.49.0. Toast messages may reflect unsanitized user input in certain tools such as Match&Replace a…

    caido caido
  • High 7.5
    CVE-2025-49004

    Hijacking Caido instance during the initial setup via DNS Rebinding to achieve RCE

    Caido is a web security auditing toolkit. Prior to version 0.48.0, due to the lack of protection for DNS rebinding, Caido can be loaded on an attacker-controlled domain. This allows a malicious website to hijack the authentication flow of Caido and achieve co…

    caido caido
  • Medium 5.2
    CVE-2025-23039

    Cross Site Scripting on URL decode Tooltip in Caido

    Caido is a web security auditing toolkit. A Cross-Site Scripting (XSS) vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This issue could allow an attacker to execute a…

    caido caido