Vulnerability GO-2025-3770
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
July 21, 2025 at 03:05 PM UTC
Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi
v5.2.1
v5.2.1
Summary
Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi
Details
Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
2 months ago
Chi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi
v5.2.1 - v5.2.5 GO-2026-5774
v5.2.1 - v5.2.5 GO-2026-5774
Unknown
2 months ago
Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi
v5.0.0 - v5.2.5 GO-2026-5775
v5.0.0 - v5.2.5 GO-2026-5775
Unknown
2 months ago
Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
v5.0.0 - v5.2.5 GO-2026-5777
v5.0.0 - v5.2.5 GO-2026-5777
Unknown
8 months ago
Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi
v5.2.2 - v5.2.3 GO-2026-4316
v5.2.2 - v5.2.3 GO-2026-4316
Medium Risk
8 months ago
chi has an open redirect vulnerability in the RedirectSlashes middleware
v5.2.2 - v5.2.3 GHSA-mqqf-5wvp-8fh8
v5.2.2 - v5.2.3 GHSA-mqqf-5wvp-8fh8
Impacted packages
Timeline
Published
1 year ago
July 21, 2025 at 03:05 PM UTC
Last Modified
1 month ago
August 15, 2026 at 05:19 AM UTC