logging

Feb 20, 2026 GO-2026-4639 +1 more

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Feb 20, 2026 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Changes in this version

type LogAppend

+ Early bool

Jan 5, 2026 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Dec 3, 2025 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Aug 22, 2025 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Aug 22, 2025 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Apr 18, 2025 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Mar 25, 2025 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Mar 24, 2025 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Mar 8, 2025 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Mar 6, 2025 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Jan 8, 2025 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Dec 30, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Nov 5, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Oct 2, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Oct 2, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Jun 2, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Jun 2, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Jun 2, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

May 30, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

May 28, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Changes in this version

+ type LogAppend struct

+ Key string

+ Value string

+ func (LogAppend) CaddyModule() caddy.ModuleInfo

+ func (h *LogAppend) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (h LogAppend) ServeHTTP(w http.ResponseWriter, r *http.Request, next caddyhttp.Handler) error

May 20, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

May 7, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Apr 30, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy