Caddy
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 10, 2023 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Caddy: fileHidden() case-sensitive pattern bypass — exposes "hidden" files via case variation
Caddy: Unbounded body buffer via {http.request.body} placeholder — memory exhaustion DoS
Caddy: rewrite placeholder re-expansion
Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed
Caddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections
CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations
Monitor Caddy in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.