caddy — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in caddy, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-30851	Caddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privilege Escalation CWE-287	8.1	High	2026-03-07
CVE-2026-30852	Caddy: vars_regexp double-expands user input, leaking env vars and files CWE-200	9.1	-	2026-03-07
CVE-2026-27590	Caddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport CWE-20	9.8	-	2026-02-24
CVE-2026-27589	Caddy vulnerable to cross-origin config application via local admin API /load (caddy) CWE-352	6.5	-	2026-02-24
CVE-2026-27588	Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass CWE-178	9.1	-	2026-02-24
CVE-2026-27587	Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass CWE-178	9.1	-	2026-02-24
CVE-2026-27586	Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed CWE-755	8.2	-	2026-02-24
CVE-2026-27585	Caddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections CWE-20	9.1	-	2026-02-24

All 8 known CVE vulnerabilities affecting caddy with full Chinese analysis, references, and POCs where available.