Go/github.com/caddyserver/caddy/v2 CVE-2026-52846: unknown, EPSS 0.25%

Caddy: stripHTML template function bypass in github.com/caddyserver/caddy

Action: Upgrade github.com/caddyserver/caddy/v2 to 2.11.4 or later.

go get github.com/caddyserver/caddy/v2@v2.11.4

Affected

Fixed versions

Sources

• osv: GO-2026-5660
• https://github.com/caddyserver/caddy/security/advisories/GHSA-vcc4-2c75-vc9v

CVE-2026-52846 · published 2026-07-24T18:35:55Z · modified 2026-07-24T19:00:25.441370322Z · JSON