Known Vulnerabilities for Caddy by Caddy Project
Listed below are 1 of the newest known vulnerabilities associated with "Caddy" by "Caddy Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-55454 json | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the bundled Caddy reverse-proxy's... | Not Provided | 2026-06-24 | 2026-06-25 |
| CVE-2026-52846 json | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, Caddy’s stripHTML template function canno... | Not Provided | 2026-06-23 | 2026-06-25 |
| CVE-2026-52845 json | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_headers deletes the exact... | Not Provided | 2026-06-23 | 2026-07-15 |
| CVE-2026-52844 json | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat /priv... | Not Provided | 2026-06-23 | 2026-06-23 |
| CVE-2026-50189 json | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled supervisord ex... | Not Provided | 2026-06-24 | 2026-06-25 |
| CVE-2026-46415 json | The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate requests based on the client's I... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-45692 json | Caddy is an extensible server platform that uses TLS by default. From 2.4.0 until 2.11.3, the authorization layer and the /co... | Not Provided | 2026-06-23 | 2026-06-26 |
| CVE-2026-45135 json | Caddy is an extensible server platform that uses TLS by default. From 2.7.0 until 2.11.3, the FastCGI transport's splitPos() ... | Not Provided | 2026-06-23 | 2026-06-23 |
| CVE-2023-49854 json | Cross-Site Request Forgery (CSRF) vulnerability in Tribe Interactive Caddy – Smart Side Cart for WooCommerce.This issue aff... | Not Provided | 2023-12-18 | 2026-04-28 |
| CVE-2017-5963 json | An issue was discovered in caddy (for TYPO3) before 7.2.10. The vulnerability exists due to insufficient filtration of user-s... | 6.1 - MEDIUM | 2017-02-12 | 2019-03-08 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Caddy Project | Caddy | 8.9.4 | |||
| Application | Caddy Project | Caddy | 8.9.0 | |||
| Application | Caddy Project | Caddy | 8.8.3 | |||
| Application | Caddy Project | Caddy | 8.8.2 | |||
| Application | Caddy Project | Caddy | 8.8.0 | |||
| Application | Caddy Project | Caddy | 8.7.3 | |||
| Application | Caddy Project | Caddy | 8.7.2 | |||
| Application | Caddy Project | Caddy | 8.7.1 | |||
| Application | Caddy Project | Caddy | 8.7.0 | |||
| Application | Caddy Project | Caddy | 8.17.5 | |||
| Application | Caddy Project | Caddy | 8.17.4 | |||
| Application | Caddy Project | Caddy | 8.17.0 | |||
| Application | Caddy Project | Caddy | 8.16.2 | |||
| Application | Caddy Project | Caddy | 8.16.1 | |||
| Application | Caddy Project | Caddy | 8.15.0 | |||
| Application | Caddy Project | Caddy | 8.14.3 | |||
| Application | Caddy Project | Caddy | 8.14.2 | |||
| Application | Caddy Project | Caddy | 8.13.4 | |||
| Application | Caddy Project | Caddy | 8.13.3 | |||
| Application | Caddy Project | Caddy | 8.13.1 |