CVE-2026-45135
2 advisories.
Go/github.com/caddyserver/caddy/v2 CVE-2026-45135: high 8.1, EPSS 0.68%
Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files
Action: Upgrade github.com/caddyserver/caddy/v2 to 2.11.3 or later.
go get github.com/caddyserver/caddy/v2@v2.11.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.7.0 | 2.11.3 | - |
Fixed versions
| 2.11.3 |
Sources
- osv: GHSA-m675-2p33-xv9g
- https://github.com/caddyserver/caddy/security/advisories/GHSA-m675-2p33-xv9g
- https://github.com/php/frankenphp/security/advisories/GHSA-3g8v-8r37-cgjm
- https://github.com/php/frankenphp/security/advisories/GHSA-g966-83w7-6w38
- https://nvd.nist.gov/vuln/detail/CVE-2026-45135
- https://github.com/caddyserver/caddy
CVE-2026-45135 · published · modified · JSON
Go/github.com/caddyserver/caddy/v2 CVE-2026-45135: unknown, EPSS 0.68%
Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files in github.com/caddyserver/caddy
Action: Upgrade github.com/caddyserver/caddy/v2 to 2.11.3 or later.
go get github.com/caddyserver/caddy/v2@v2.11.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.7.0 | 2.11.3 | - |
Fixed versions
| 2.11.3 |
Sources
- osv: GO-2026-5492
- https://github.com/caddyserver/caddy/security/advisories/GHSA-m675-2p33-xv9g
- https://github.com/caddyserver/caddy/pull/7629
- https://github.com/php/frankenphp/security/advisories/GHSA-3g8v-8r37-cgjm
- https://github.com/php/frankenphp/security/advisories/GHSA-g966-83w7-6w38
CVE-2026-45135 · published · modified · JSON