https://advisories.gitlab.com/golang/github.com/caddyserver/caddy/v2/CVE-2026-27587/
Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth...
CVE-2026-27587 Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass: Caddy's HTTP path request matcher is...