[ Vendor · 2 CVEs ]

caddyserver

CVEs affecting caddyserver published in the last 30 days, plus any caddyserver CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-92700 23 Sep 2026 CVSS 6.3 caddyserver caddyCaddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/fileserver/staticfiles.go…
CVE-2026-92284 23 Sep 2026 CVSS 6.9 caddyserver caddyCaddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/replacer.go, resolving…