GO-2026-5660

vendorUSosv

Caddy: stripHTML template function bypass in github.com/caddyserver/caddy

view advisory published 2026-07-24Licence: per source

Caddy: stripHTML template function bypass in github.com/caddyserver/caddy

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-52846US	—	0.25% (16th)	—	2026-06-23
Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, Caddy’s stripHTML template function cannot reliably remove all HTML tags from input strings. Certa…

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.