Caddy is written in go, not C, so I'm not sure why it should be especially vulnerable to buffer overflows...