Skip to content

Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass

High severity GitHub Reviewed Published Feb 23, 2026 in caddyserver/caddy • Updated Feb 27, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts