Vulnerability GO-2026-5777
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 months ago
July 24, 2026 at 06:35 PM UTC
Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
v5.0.0 - v5.2.5
v5.0.0 - v5.2.5
Summary
Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
Details
Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
2 months ago
Chi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi
v5.2.1 - v5.2.5 GO-2026-5774
v5.2.1 - v5.2.5 GO-2026-5774
Unknown
2 months ago
Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi
v5.0.0 - v5.2.5 GO-2026-5775
v5.0.0 - v5.2.5 GO-2026-5775
Unknown
8 months ago
Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi
v5.2.2 - v5.2.3 GO-2026-4316
v5.2.2 - v5.2.3 GO-2026-4316
Medium Risk
8 months ago
chi has an open redirect vulnerability in the RedirectSlashes middleware
v5.2.2 - v5.2.3 GHSA-mqqf-5wvp-8fh8
v5.2.2 - v5.2.3 GHSA-mqqf-5wvp-8fh8
Unknown
1 year ago
Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi
v5.2.1 GO-2025-3770
v5.2.1 GO-2025-3770
Impacted packages
Timeline
Published
2 months ago
July 24, 2026 at 06:35 PM UTC
Last Modified
1 month ago
August 15, 2026 at 05:19 AM UTC