Threats affecting pkg:golang/github.com/caddyserver/caddy

CVE-2026-92700 is a medium severity vulnerability in caddyserver caddy versions 2.11.3 and earlier. It involves improper handling of case sensitivity in the file hiding logic, allowing files intended to be hidden to be exposed on case-insensitive filesystems or when mixed-case paths coexist. This occurs because the fileHidden() function uses case-sensitive filepath.Match checks.