package

Go/github.com/caddyserver/caddy/v2/modules/caddyhttp/reverseproxy

pkg:go/github.com/caddyserver/caddy/v2/modules/caddyhttp/reverseproxy

HIGH8.1Go

Caddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privilege Escalation

Modified: 3/23/2026