Is there a mailing list for security announcements for Caddy? Or is there some other way for users to be notified quickly of a security-related issue or a new release to fix a security issue?
Most of us won’t remember to check this forum or the releases page often enough.
There isn’t one, as I never considered our user base large enough to justify the maintenance of a mailing list (and you’re only the first request for one). For now, I would just follow GitHub releases or Twitter or this forum (you can enable email notifications in Settings). Between all these options, especially email-based options, I don’t know that there’s much need for a separate mailing list.