Security flaws in an SSO plugin for Caddy

Trail of Bits identified 10 vulnerabilities in Caddy's caddy-security SSO plugin, enabling reflected XSS, OAuth replay, 2FA brute-force bypass, open redirection, and unauthorized access.