更新: 291 个文件 - 2026-03-23 03:00:08

07-framework-security/servers/caddy/INDEX.md

@@ -5,14 +5,14 @@
 - 系统 ID: `caddy`
 - 分类: `servers`
 - 覆盖策略: `rolling-24m`
-- 总案例数: `27`
-- 近 30 天新增/更新: `6`
+- 总案例数: `29`
+- 近 30 天新增/更新: `8`
 - 重点 Markdown 案例数: `0`
 - 已实证(真实版本): `0`
 - 已实证(synthetic): `0`
 - 阻塞数: `0`
-- 待人工/缺浏览器证据: `27`
-- 最近渲染时间: `2026-03-22T09:18:57+00:00`
+- 待人工/缺浏览器证据: `29`
+- 最近渲染时间: `2026-03-23T09:54:10+00:00`
 
 ## 目标约束
 
@@ -31,6 +31,8 @@
 
 | 标题 | 严重度 | 案例状态 | 实证状态 | 实证方式 | 来源置信度 | 更新时间 | 案例页 |
 |------|--------|----------|----------|----------|------------|----------|--------|
+| Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy | `unknown` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-23T04:52:47.652974Z` | - |
+| Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy | `unknown` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-23T04:52:47.870034Z` | - |
 | Caddy: Unicode case-folding length expansion causes incorrect split_path index in FastCGI transport | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-02-27T19:55:10Z` | - |
 | Caddy is vulnerable to cross-origin config application via local admin API /load  | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-02-27T19:54:36Z` | - |
 | Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-02-27T19:53:54Z` | - |