CVE-2026-92284 in Caddy
要約
〜によって MITRE • 2026年09月23日
Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/replacer.go, resolving http.request.body reads the complete request body with an unbounded io.Copy before request-body middleware limits apply, allowing memory exhaustion and process termination.
VulDB is the best source for vulnerability data and more expert information about this specific topic.