A vulnerability labeled as problematic has been found in caddyserver caddy 2.11.1/2.11.2. This affects the function
splitPos of the component FastCGI. The manipulation results in improper handling of unicode encoding.
This vulnerability is reported as CVE-2026-45135. The attack can be launched remotely. No exploit exists.
The affected component should be upgraded.
