Caddy 1.x — End of Life

EOL
EOL: Jul 1, 20201 release in this series0 CVEs

Caddy 1.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatus
1Apr 24, 2019Jul 1, 20201.0.5EOL

CVEs affecting Caddy 1.x (0)

No CVEs tracked for Caddy 1.x.

Caddy 1.x is EOL — migrate to Caddy 2.x

Caddy 2.x is the next major release. Plan your upgrade before Caddy 1.x stops receiving security patches.

See Caddy 2.x

Frequently asked questions

Is Caddy 1 end of life?

Yes. All Caddy 1.x releases have reached end of life and no longer receive security patches. Migrate to Caddy 2.x as soon as possible.

What CVEs affect Caddy 1?

No CVEs are currently tracked for Caddy 1.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.

What is the latest Caddy 1 version?

The latest Caddy 1.x patch release is 1.0.5, released on February 28, 2020. Always run the latest patch to benefit from all security fixes.

How to migrate from Caddy 1 to Caddy 2?

To migrate from Caddy 1 to Caddy 2: (1) review the official Caddy 2 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Caddy 1 in production?

No. Caddy 1 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA