{"action":"Upgrade pkg.jsn.cam/caddy-defender to 0.10.1 or later.","affected":[{"fixed":"0.10.1","introduced":"0"}],"component":"pkg.jsn.cam/caddy-defender","cve_ids":["CVE-2026-46415"],"ecosystem":"Go","epss":0.00234,"exploited":false,"fixed_versions":["0.10.1"],"ghsa_id":"GHSA-3h23-rrpc-3p87","id":"tcs_01M5KETXMTBRVHX7WSW1JD26Y4","modified_at":"2026-06-25T18:56:31.224877912Z","published_at":"2026-05-19T20:29:14Z","references":["https://osv.dev/vulnerability/GHSA-3h23-rrpc-3p87","https://github.com/JasonLovesDoggo/caddy-defender/security/advisories/GHSA-3h23-rrpc-3p87","https://github.com/JasonLovesDoggo/caddy-defender/pull/139","https://github.com/JasonLovesDoggo/caddy-defender"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-3h23-rrpc-3p87","url":"https://osv.dev/vulnerability/GHSA-3h23-rrpc-3p87"}],"summary":"Caddy Defender trusted proxy client IP bypass"}