All vulnerabilities

Go

CVE-2026-55458

Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through

Severity: Low
Published: 28 Oct 2026
Last changed: 28 Oct 2026
Added to UpHeron: 28 Oct 2026
Fixed in: 2.11.5
Also known as: GHSA-8qx7-j2v2-x6q5
Sources: OSV.dev and GitHub

Affected software

Software	Affected versions
CaddyGo · `osv:Go:github.com/caddyserver/caddy/v2`	Every version before 2.11.5

References

CVE.org https://www.cve.org/CVERecord?id=CVE-2026-55458
GitHub Advisory Database https://github.com/advisories/GHSA-8qx7-j2v2-x6q5