GHSA-8h95-jcp5-pjprMediumCVSS 5.3

Improper Validation of Array Index in github.com/greenpau/caddy-security

Published
February 17, 2024
Last Modified
March 20, 2026

🔗 CVE IDs covered (1)

📋 Description

All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affected library do not validate whether their input values are nil before attempting to access elements, which can lead to a panic (index out of range). Panics during the parsing of a configuration file may introduce ambiguity and vulnerabilities, hindering the correct interpretation and configuration of the web server.

🎯 Affected products1

  • go/github.com/greenpau/caddy-security:<= 1.1.23

🔗 References (5)