CVE-2026-45135Published
Caddy is an extensible server platform that uses TLS by default. From 2.7.0 until 2.11.3, the FastCGI transport's splitPos() in modules/caddyhttp/reverseproxy/fastcgi/fastcgi.go misuses golang.org/x/text/search with search.IgnoreCase when t…
Exact source revision recorded 27 Oct 2026 11:12:23 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-45135 · Microsoft / collected KEV context
nvd · CVE-2026-45135
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.