{"action":"Upgrade github.com/caddyserver/caddy/v2 to 2.11.2 or later.","affected":[{"fixed":"2.11.2","introduced":"2.10.0"}],"component":"github.com/caddyserver/caddy/v2","cve_ids":["CVE-2026-30851"],"ecosystem":"Go","epss":0.00259,"exploited":false,"fixed_versions":["2.11.2"],"ghsa_id":"GHSA-7r4p-vjf4-gxv4","id":"tcs_01M5KGF0AER7TSA943YPPFTWM0","modified_at":"2026-03-23T04:52:47.652974Z","published_at":"2026-03-10T18:28:25Z","references":["https://osv.dev/vulnerability/GO-2026-4639","https://github.com/caddyserver/caddy/security/advisories/GHSA-7r4p-vjf4-gxv4","https://github.com/caddyserver/caddy/pull/6608","https://github.com/caddyserver/caddy/pull/7545","https://github.com/caddyserver/caddy/issues/6610"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-4639","url":"https://osv.dev/vulnerability/GO-2026-4639"}],"summary":"Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy"}