Issues

• Config reload can hang on a stalled WebSocket peer

  caddyserver/caddy#8308 · Filter by author excid3 opened on Oct 30, 2026

• caddytls: support network_proxy in the Caddyfile ACME issuer

  caddyserver/caddy#8304 · Filter by author wankhede04 opened on Oct 29, 2026

• headers, rewrite: replace with an empty search inserts the replacement between every character

  caddyserver/caddy#8302 · Filter by author wankhede04 opened on Oct 29, 2026

• Automation policy sorting can place a wildcard before a specific subject

  bug 🐞
  caddyserver/caddy#8300 · Filter by author steadytao opened on Oct 29, 2026
  2

• reverse_proxy: websocket over HTTP/3 or HTTP/2 sends two Sec-WebSocket-Key headers upstream when header ops apply

  bug 🐞
  caddyserver/caddy#8297 · Filter by author dkulchenko opened on Oct 28, 2026
  3

• http_redirect listener wrapper builds a malformed Location for absolute-form and asterisk-form requests

  bug 🐞
  caddyserver/caddy#8293 · Filter by author jlave-dev opened on Oct 27, 2026
  3

• map: input_regexp mappings do not expand placeholders in outputs

  bug 🐞
  caddyserver/caddy#8292 · Filter by author jlave-dev opened on Oct 27, 2026
  1

• reverseproxy: copy_response_headers forwards a stale Content-Length after handle_response replaces the body

  bug 🐞
  caddyserver/caddy#8291 · Filter by author jlave-dev opened on Oct 27, 2026
  1

• reverseproxy: isBidirectionalStream is unreachable

  caddyserver/caddy#8290 · Filter by author jlave-dev opened on Oct 27, 2026
  1

• Request: v2.11.8 patch release built with Go ≥ 1.26.10 (Go stdlib + x/net CVEs in official image)

  caddyserver/caddy#8282 · Filter by author stevehockey opened on Oct 27, 2026
  1

• fileserver: try_files stats each existing candidate twice

  caddyserver/caddy#8275 · Filter by author ptondereau opened on Oct 24, 2026
  1

• Current latest binaries use a Go version affected by CVE-2026-111943

  caddyserver/caddy#8268 · Filter by author otbutz opened on Oct 22, 2026
  1

• Method matcher uppercases case-sensitive extension methods

  bug 🐞
  caddyserver/caddy#8244 · Filter by author steadytao opened on Oct 17, 2026

• Config reload closes newly accepted HTTP/1.1 connections with no response (Shutdown before the listener stops accepting)

  caddyserver/caddy#8233 · Filter by author ramonmalcolm10 opened on Oct 16, 2026
  1

• v2.11.6 silently disables client authentication on subdomains that previously inherited it

  bug 🐞
  caddyserver/caddy#8232 · Filter by author reasonableperson opened on Oct 16, 2026 · v2.12.0
  

• caddy reload hangs forever and the admin API dies when the cache maintenance tick lands during TLS.Provision (nil pointer in getAutomationPolicyForName, read lock leaked)

  bug 🐞
  caddyserver/caddy#8231 · Filter by author Roanmh opened on Oct 15, 2026
  3

• fuzz-parse-network-address: Timeout in fuzz-parse-network-address

  bug 🐞
  caddyserver/caddy#8229 · Filter by author mohammed90 opened on Oct 15, 2026
  4

• reverseproxy: health-check redirects still dial the original upstream

  bug 🐞
  caddyserver/caddy#8222 · Filter by author Indra55 opened on Oct 15, 2026
  4

• Session ticket lifetime is too long

  caddyserver/caddy#8218 · Filter by author Synchro opened on Oct 15, 2026
  2

• fileserver: precompressed sidecar's Content-Encoding and Content-Length end up on error responses

  caddyserver/caddy#8204 · Filter by author NitinKumar004 opened on Oct 13, 2026

• Go 1.26 can desynchronise HTTP/1 connections after early upstream responses

  bug 🐞dependencies ⛓️
  caddyserver/caddy#8196 · Filter by author bani6809 opened on Oct 11, 2026 · v2.12.0
  6

• reverseproxy: WebSocket fails with NS_ERROR_NET_RESET in Firefox when network.dns.force_use_https_rr = true

  caddyserver/caddy#8193 · Filter by author androw opened on Oct 11, 2026
  4

• reverseproxy: request hangs when HTTP/2 upstream resets stream while request body read is pending

  caddyserver/caddy#8185 · Filter by author slashfast opened on Oct 9, 2026
  4

• Expose QUIC packet size / PMTUD options (HTTP/3 stalls when path MTU discovery overshoots)

  caddyserver/caddy#8175 · Filter by author MikeRuf opened on Oct 8, 2026
  2

• Panic in deferred write-timeout flush when an upgraded (hijacked) connection outlives write_timeout

  bug 🐞
  caddyserver/caddy#8151 · Filter by author Droid0012 opened on Oct 5, 2026
  1