{"action":"Upgrade github.com/mholt/caddy to 0.10.13 or later.","affected":[{"fixed":"0.10.13","introduced":"0"}],"component":"github.com/mholt/caddy","cve_ids":["CVE-2018-21246"],"ecosystem":"Go","epss":0.02723,"exploited":false,"fixed_versions":["0.10.13"],"ghsa_id":"GHSA-gr7w-x2jp-3xgw","id":"tcs_01M5KFT7ETGHE93YP67M6WK3WS","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2020-0043","https://github.com/caddyserver/caddy/pull/2099","https://github.com/caddyserver/caddy/commit/4d9ee000c8d2cbcdd8284007c1e0f2da7bc3c7c3","https://bugs.gentoo.org/715214"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2020-0043","url":"https://osv.dev/vulnerability/GO-2020-0043"}],"summary":"Authentication bypass in github.com/mholt/caddy"}