winget install --id CaddyServer.CaddyAbout Caddy
HTTP/2 web server with automatic HTTPS
What's new in 2.11.3
This release improves several aspects of Caddy with minor features, bug fixes, and security patches. Thank you to everyone and their bots who contributed to help make this release the best one yet! Security patches: - fastcgi: Carrying over a patch from FrankenPHP for a bug that could allow non-PHP files to be executed; collaborated on by @dunglas, @KC1zs4, and @chenjj. - vars: A more thorough fix for GHSA-m2w3-8f23-hxxf, collaborated by @everping and @vnxme. - admin: Array index normalization to prevent remote admin socket auth bypass, by @Amemoyoi and bot. - admin: More rigorous path prefix matching to prevent remote admin socket auth bypass, by @Amemoyoi and bot. We've also merged a couple PRs that fix upstream security bugs in other projects like quic-go and CertMagic. Thank you to @marten-seemann for maintaining quic-go so diligently! What's Changed - caddyhttp: Sync placeholder expansion in vars and vars_regexp by @vnxme in #7573 - caddytls: Avoid ACME fallback for implicit Tailscale *.ts.net policies by @steadytao in #7577 - chore: Resolve recent CI failures by @mholt in #7593 - caddytls: Consolidate empty APs more smartly by @mholt in #7567 - rewrite: skip query rename when source key is absent by @steadytao in #7599 - root: introduce down-propagating Helper.BlockState for other directives/plugins to use by @henderkes in #7594 - http: make zstd checksum configurable by @ottenhoff in #7586 - notify: Always send "READY=1" even after an error by @francislavoie in #7597 - reverseproxy: Fix check for header_up Host {upstream_hostport} redundancy by @yubiuser in #7564 - c...
Version history
| Version | Updated | Notes |
|---|---|---|
| 2.11.3 | Unknown | This release improves several aspects of Caddy with minor features, bug fixes, and security patches. Thank you to everyone and their bots who contributed to help make this release the best one yet! Security patches: - fa... |
| 2.11.2 | Unknown | Caddy 2.11.2 contains numerous bug fixes and enhancements! I know that's a lame summary but it's really all over the place. Highlights - Reverse proxy got a lot of love with certain edge cases related to PROXY protocol,... |
| 2.11.1 | Unknown | Our community is pleased to announce Caddy 2.11! Of note are new features, numerous bug fixes including several security patches, and various QoL ("quality-of-life") enhancements. There are no code changes from v2.11.0 o... |
| 2.10.2 | Unknown | This is a hotfix release to fix a couple critical issues from v2.10.1 What's Changed - http: Make logger first, before TLS provisioning by @francislavoie in #7198 - httpcaddyfile: Fix acme_dns regression by @francislavoi... |
| 2.10.1 | Unknown | This is probably our biggest patch release ever -- not that lots of things were broken, but there's lots of refinement happening thanks to broader adoption and contributions from many more people. Just look at the New Co... |
| 2.10.0 | Unknown | Caddy 2.10 is here! Aside from bug fixes, this release features: - Encrypted ClientHello (ECH): This new technology encrypts the last plaintext portion of a TLS connection: the ClientHello, which includes the domain name... |
| 2.9.1 | Unknown | This is a patch release fixing a few issues related to FastCGI, HTTP/3 and unix sockets, log file permissions, repeated TERM signals, and an ARI edge case. It also adds Caddyfile support for response matching in the head... |
| 2.9.0 | Unknown | Happy New Year! We're pleased to release Caddy 2.9. Aside from some minor new features, this release is mainly focused on refinements and bug fixes in many areas, including: - Config loading - Events - Logging - Placehol... |
| 2.7.6 | Unknown | In this version we've made several fixes and enhancements with help from several contributors. Most changes are small, but some notable ones:- The templates middleware is now officially extensible (experimentally). This... |
| 2.6.4 | Unknown | No notes |