Caddy-security vulnerabilities

2 known vulnerabilities in Caddy-security from Authcrunch. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  github.com/greenpau/caddy-security: Use of Insufficiently Random Values

  CVE-2024-21495Feb 17, 2024Github.com/greenpau/caddy-security

  Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure random number generation library which could possibly be predicted via a brute-force search. Attackers could use the potenti

• 8.1 High severity

  All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient…

  CVE-2024-21492Feb 17, 2024Github.com/greenpau/caddy-security

  All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the "Sign Out" button. User sessions remain valid even after requests are sent to /logout a