Debian/caddy: low 3.8
Caddy is an extensible server platform that uses TLS by default. From 2.4.0 until 2.11.3, the authorization layer and the /config traversal layer do not agree on what object the path refers to. In thi
Action: Upgrade caddy to 2.6.2-12+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.2-12+deb13u1 | - |
Fixed versions
| 2.6.2-12+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-45692#Debian:13/caddy
- https://security-tracker.debian.org/tracker/CVE-2026-45692
published · modified · JSON