Debian/caddy: medium 4.2
Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, Caddy’s stripHTML template function cannot reliably remove all HTML tags from input strings. Certain malformed HTML, s
Action: Upgrade caddy to 2.11.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.11.4-1 | - |
Fixed versions
| 2.11.4-1 |
Sources
- osv: DEBIAN-CVE-2026-52846#Debian:14/caddy
- https://security-tracker.debian.org/tracker/CVE-2026-52846
published · modified · JSON