Is github.com/greenpau/caddy-security safe ? github.com/greenpau/caddy-security (go) has 10 known vulnerabilities, the worst rated MODERATE. No malicious-package signal is recorded.
// reach 0 direct dependencies
none carry a known advisory
0 packages depend on it
an advisory here reaches each of them
// ai model usage Tracked for PyPI packages. HuggingFace models declare Python dependencies, so go packages are not covered.
cvss CVSS v3.1 base score out of 10
epss chance of exploitation in 30 days, 47th percentile of all CVEs
xyz score CyberXYZ composite out of 10
fig. 01 — GHSA-93x8-66j2-wwr5, the advisory selected below
// 10 advisories GHSA-93x8-66j2-wwr5 All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host header manipulation. MODE GHSA-vfph-hjfv-cpv2 All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive Authentication Attempts via the two-factor… MODE GHSA-vp66-gf7w-9m4x All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon… MODE GHSA-vj36-3ccr-6563 All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via the X-Forwarded-For header due to… MODE GHSA-8h95-jcp5-pjpr All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. MODE GHSA-c7vf-m394-m4x4 Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure random number… MODE GHSA-ff72-ff42-c3gw All versions of the package github.com/greenpau/caddy-security are vulnerable to Cross-site Scripting (XSS) via the Referer header, due to improper input… MODE GHSA-r969-783f-6jqr All versions of the package github.com/greenpau/caddy-security are vulnerable to HTTP Header Injection via the X-Forwarded-Proto header due to redirecting to… MODE GHSA-8hp3-rmr7-xh88 All versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirecturl parameter. MODE GHSA-xwmv-cx7p-fqfc The caddy-security plugin 1.1.20 for Caddy allows reflected XSS via a GET request to a URL that contains an XSS payload and begins with either a /admin or… MODE All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host header manipulation.
Full advisory text at GitHub advisory or NVD .
// cvss v3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability None // questions Is github.com/greenpau/caddy-security safe to install? CyberXYZ does not call a package safe in absolute terms. It records 10 known vulnerabilities for github.com/greenpau/caddy-security (go), the worst rated MODERATE, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Does github.com/greenpau/caddy-security have known vulnerabilities? Yes. CyberXYZ records 10 known vulnerabilities for github.com/greenpau/caddy-security (go), the worst rated MODERATE. These include GHSA-93x8-66j2-wwr5, GHSA-vfph-hjfv-cpv2, GHSA-vp66-gf7w-9m4x, GHSA-vj36-3ccr-6563, GHSA-8h95-jcp5-pjpr.
How do I check github.com/greenpau/caddy-security before installing? Search github.com/greenpau/caddy-security in CyberXYZ Check at https://cyberxyz.io/check?q=github.com%2Fgreenpau%2Fcaddy-security . The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 07:12 UTC. The most recent advisory here was published 2024-02-17. Updated continuously from NVD, GHSA, OSV and CNA feeds.
Think a verdict here is wrong? Tell us — we respond within 2 business days. Report an issue with this page