Vulnerabilities > Caddyserver > Caddy > 0.10.14
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-10-10 | CVE-2023-44487 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | 7.5 |
2018-11-10 | CVE-2018-19148 | Information Exposure vulnerability in Caddyserver Caddy Caddy through 0.11.0 sends incorrect certificates for certain invalid requests, making it easier for attackers to enumerate hostnames. | 3.7 |