| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/caddyserver/caddy | < 0.10.13 | 0.10.13 |
| github.com/mholt/caddy | < 0.10.13 | 0.10.13 |
| caddy | < 0.10.3 | 0.10.3 |
Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free