{"action":"Upgrade github.com/caddyserver/caddy/v2 to 2.5.0-beta.1 or later.","affected":[{"fixed":"2.5.0-beta.1","introduced":"0"}],"component":"github.com/caddyserver/caddy/v2","cve_ids":["CVE-2022-28923"],"ecosystem":"Go","epss":0.01431,"exploited":false,"fixed_versions":["2.5.0-beta.1"],"ghsa_id":"GHSA-qpm3-vr34-h8w8","id":"tcs_01M5KFYM4KJ8H6XEWJRKMAWGNN","modified_at":"2026-02-04T02:47:40.613081Z","published_at":"2023-02-16T18:37:09Z","references":["https://osv.dev/vulnerability/GO-2023-1567","https://lednerb.de/en/publications/responsible-disclosure/caddy-open-redirect-vulnerability/","https://github.com/caddyserver/caddy/commit/78b5356f2b1945a90de1ef7f2c7669d82098edbd","https://github.com/advisories/GHSA-qpm3-vr34-h8w8"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1567","url":"https://osv.dev/vulnerability/GO-2023-1567"}],"summary":"Open redirect in github.com/caddyserver/caddy/v2"}