Issues

static directory index fails with an explicit try_files configuration

caddyserver/caddy#8405 · opened

on Nov 11, 2026

2

HTTP/1.1 keep-alive connection is reused after read_body_idle timeout and the next request fails (follow-up to #8165, still on v2.11.9)

caddyserver/caddy#8401 · opened

on Nov 10, 2026

v2.11.9: clearing a handler read deadline installs read_body as a hard deadline, truncating responses of requests longer than read_body (regression from #8284)

caddyserver/caddy#8399 · opened

on Nov 10, 2026

fileserver: reject data/config directories inside a served root

caddyserver/caddy#8381 · opened

on Nov 8, 2026

5

Decoded path placeholders can inject URI structure

caddyserver/caddy#8339 · opened

on Nov 3, 2026

5

caddytls: support network_proxy in the Caddyfile ACME issuer

caddyserver/caddy#8304 · opened

on Oct 29, 2026

headers, rewrite: replace with an empty search inserts the replacement between every character

caddyserver/caddy#8302 · opened

on Oct 29, 2026

Automation policy sorting can place a wildcard before a specific subject

caddyserver/caddy#8300 · opened

on Oct 29, 2026

2

http_redirect listener wrapper builds a malformed Location for absolute-form and asterisk-form requests

caddyserver/caddy#8293 · opened

on Oct 27, 2026

3

map: input_regexp mappings do not expand placeholders in outputs

caddyserver/caddy#8292 · opened

on Oct 27, 2026

1

reverseproxy: copy_response_headers forwards a stale Content-Length after handle_response replaces the body

caddyserver/caddy#8291 · opened

on Oct 27, 2026

1

fileserver: try_files stats each existing candidate twice

caddyserver/caddy#8275 · opened

on Oct 24, 2026

1

Method matcher uppercases case-sensitive extension methods

caddyserver/caddy#8244 · opened

on Oct 17, 2026

Config reload closes newly accepted HTTP/1.1 connections with no response (Shutdown before the listener stops accepting)

caddyserver/caddy#8233 · opened

on Oct 16, 2026

1

v2.11.6 silently disables client authentication on subdomains that previously inherited it

caddyserver/caddy#8232 · opened

on Oct 16, 2026

· v2.12.0

`caddy reload` hangs forever and the admin API dies when the cache maintenance tick lands during `TLS.Provision` (nil pointer in `getAutomationPolicyForName`, read lock leaked)

caddyserver/caddy#8231 · opened

on Oct 15, 2026

3

reverseproxy: health-check redirects still dial the original upstream

caddyserver/caddy#8222 · opened

on Oct 15, 2026

4

Session ticket lifetime is too long

caddyserver/caddy#8218 · opened

on Oct 15, 2026

2

fileserver: precompressed sidecar's Content-Encoding and Content-Length end up on error responses

caddyserver/caddy#8204 · opened

on Oct 13, 2026

reverseproxy: WebSocket fails with NS_ERROR_NET_RESET in Firefox when network.dns.force_use_https_rr = true

caddyserver/caddy#8193 · opened

on Oct 11, 2026

4

reverseproxy: request hangs when HTTP/2 upstream resets stream while request body read is pending

caddyserver/caddy#8185 · opened

on Oct 9, 2026

4

Panic in deferred write-timeout flush when an upgraded (hijacked) connection outlives write_timeout

caddyserver/caddy#8151 · opened

on Oct 5, 2026

1

core: config reload cleans up handler modules while requests are still running

caddyserver/caddy#8143 · opened

on Oct 4, 2026

2

http: on config reload, the grace period context is cancelled as soon as `App.Stop` returns, so graceful shutdown of the old servers always ends immediately with "context canceled"

caddyserver/caddy#8078 · opened

on Sep 28, 2026

4

Expose the negotiated TLS key exchange (curve) as a placeholder and access-log field

caddyserver/caddy#8065 · opened

on Sep 25, 2026

5

Navigation Menu

Repository navigation

Issues

static directory index fails with an explicit try_files configuration

HTTP/1.1 keep-alive connection is reused after read_body_idle timeout and the next request fails (follow-up to #8165, still on v2.11.9)

v2.11.9: clearing a handler read deadline installs read_body as a hard deadline, truncating responses of requests longer than read_body (regression from #8284)

fileserver: reject data/config directories inside a served root

Decoded path placeholders can inject URI structure

caddytls: support network_proxy in the Caddyfile ACME issuer

headers, rewrite: replace with an empty search inserts the replacement between every character

Automation policy sorting can place a wildcard before a specific subject

http_redirect listener wrapper builds a malformed Location for absolute-form and asterisk-form requests

map: input_regexp mappings do not expand placeholders in outputs

reverseproxy: copy_response_headers forwards a stale Content-Length after handle_response replaces the body

fileserver: try_files stats each existing candidate twice

Method matcher uppercases case-sensitive extension methods

Config reload closes newly accepted HTTP/1.1 connections with no response (Shutdown before the listener stops accepting)

v2.11.6 silently disables client authentication on subdomains that previously inherited it

`caddy reload` hangs forever and the admin API dies when the cache maintenance tick lands during `TLS.Provision` (nil pointer in `getAutomationPolicyForName`, read lock leaked)

reverseproxy: health-check redirects still dial the original upstream

Session ticket lifetime is too long

fileserver: precompressed sidecar's Content-Encoding and Content-Length end up on error responses

reverseproxy: WebSocket fails with NS_ERROR_NET_RESET in Firefox when network.dns.force_use_https_rr = true

reverseproxy: request hangs when HTTP/2 upstream resets stream while request body read is pending

Panic in deferred write-timeout flush when an upgraded (hijacked) connection outlives write_timeout

core: config reload cleans up handler modules while requests are still running

http: on config reload, the grace period context is cancelled as soon as `App.Stop` returns, so graceful shutdown of the old servers always ends immediately with "context canceled"

Expose the negotiated TLS key exchange (curve) as a placeholder and access-log field