Debian/caddy: medium 4.2
Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, Caddy’s stripHTML template function cannot reliably remove all HTML tags from input strings. Certain malformed HTML, s
Action: Upgrade caddy to 2.6.2-12+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.2-12+deb13u1 | - |
Fixed versions
| 2.6.2-12+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-52846#Debian:13/caddy
- https://security-tracker.debian.org/tracker/CVE-2026-52846
published · modified · JSON