{"action":"Upgrade pkg.jsn.cam/caddy-defender to 0.10.1 or later.","affected":[{"fixed":"0.10.1","introduced":"0"}],"component":"pkg.jsn.cam/caddy-defender","cve_ids":["CVE-2026-46415"],"ecosystem":"Go","epss":0.00234,"exploited":false,"fixed_versions":["0.10.1"],"ghsa_id":"GHSA-3h23-rrpc-3p87","id":"tcs_01M5KGHRNDC3C379HR3QF828QK","modified_at":"2026-06-25T18:45:19.528643091Z","published_at":"2026-06-25T18:26:48Z","references":["https://osv.dev/vulnerability/GO-2026-5086","https://github.com/JasonLovesDoggo/caddy-defender/security/advisories/GHSA-3h23-rrpc-3p87","https://github.com/JasonLovesDoggo/caddy-defender/pull/139"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GO-2026-5086","url":"https://osv.dev/vulnerability/GO-2026-5086"},{"source":"nvd","source_id":"CVE-2026-46415","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46415"}],"summary":"Caddy Defender trusted proxy client IP bypass in pkg.jsn.cam/caddy-defender"}