Go/github.com/caddyserver/caddy CVE-2026-52846: medium 4.2, EPSS 0.25%
Caddy: stripHTML template function bypass
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vcc4-2c75-vc9v#Go/github.com/caddyserver/caddy
- https://github.com/caddyserver/caddy/security/advisories/GHSA-vcc4-2c75-vc9v
- https://github.com/caddyserver/caddy
CVE-2026-52846 · published · modified · JSON