https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:47:59.369810+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-374348 EUVD-2026-374348 2026-10-03T01:47:59.421966+00:00 EUVD-2026-374348 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92284 fkie_cve-2026-92284 2026-10-03T01:47:59.422010+00:00

Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/replacer.go, resolving http.request.body reads the complete request body with an unbounded io.Copy before request-body middleware limits apply, allowing memory exhaustion and process termination.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-92284 UBUNTU-CVE-2026-92284 2026-10-03T01:47:59.422046+00:00

Affected: Ubuntu:Pro:24.04:LTS: caddy, Ubuntu:Pro:26.04:LTS: caddy

Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/replacer.go, resolving http.request.body reads the complete request body with an unbounded io.Copy before request-body middleware limits apply, allowing memory exhaustion and process termination.