Skip to content

Vulnerabilities of caddyserver caddy

Is your version affected?

CVE Summary Score Published
CVE-2026-55458 Caddy: RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through 2.9 Low Nov 5, 2026
CVE-2026-92700 Caddy is an extensible server platform that uses TLS by default 6.3 Medium Sep 23, 2026
CVE-2026-92284 Caddy is an extensible server platform that uses TLS by default 6.9 Medium Sep 23, 2026
CVE-2026-77281 Caddy is an extensible server platform that uses TLS by default 6.5 Medium Sep 17, 2026
CVE-2026-45135 Caddy is an extensible server platform that uses TLS by default 8.1 High Jun 23, 2026
CVE-2026-45692 Caddy is an extensible server platform that uses TLS by default 5.4 Medium Jun 23, 2026
CVE-2026-52845 Caddy is an extensible server platform that uses TLS by default 8.1 High Jun 23, 2026
CVE-2026-52844 Caddy is an extensible server platform that uses TLS by default 7.5 High Jun 23, 2026
CVE-2026-52846 Caddy is an extensible server platform that uses TLS by default 4.2 Medium Jun 23, 2026
CVE-2026-30851 Caddy is an extensible server platform that uses TLS by default 8.1 High Mar 7, 2026
CVE-2026-30852 Caddy is an extensible server platform that uses TLS by default 5.5 Medium Mar 7, 2026
CVE-2026-27590 Caddy is an extensible server platform that uses TLS by default 8.9 High Feb 24, 2026
CVE-2026-27589 Caddy is an extensible server platform that uses TLS by default 6.9 Medium Feb 24, 2026
CVE-2026-27588 Caddy is an extensible server platform that uses TLS by default 7.7 High Feb 24, 2026
CVE-2026-27587 Caddy is an extensible server platform that uses TLS by default 7.7 High Feb 24, 2026
CVE-2026-27586 Caddy is an extensible server platform that uses TLS by default 8.8 High Feb 24, 2026
CVE-2026-27585 Caddy is an extensible server platform that uses TLS by default 6.9 Medium Feb 24, 2026