CVE-2026-52845 - Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`
CVE ID :CVE-2026-52845 Published : June 23, 2026, 5:52 p.m. | 5 hours, 18 minutes ago Description :Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_headers deletes the exact client-supplied identity header before copying the trusted value...