MEDIUMGo
GHSA-m2w3-8f23-hxxf· CVE-2026-30852, GO-2026-4644Caddy's vars_regexp double-expands user input, leaking env vars and files
Modified: 3/23/2026
package
Go/github.com/caddyserver/caddy/v2/modules/caddyhttp
pkg:go/github.com/caddyserver/caddy/v2/modules/caddyhttp