Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
github.com/go-chi/chi/v5
Go
· Package
6 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
chi Has an IP Spoofing Vulnerability in `middleware.RealIP`
CVE-2026-72815 · GHSA-3FXJ-6JH8-HVHX
Version ranges need review.
github.com/go-chi/chi/v5/middleware
github.com/go-chi/chi/v5
Go
Red Hat
Medium
Fix reported
2026-11-04
chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
CVE-2026-114437 · GHSA-J6QF-3M9C-VWJ3
github.com/go-chi/chi/v5
Logging Subsystem for Red Hat OpenShift/openshift-logging/opa-openshift-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-24
chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes
CVE-2025-71405 · GHSA-VRW8-FXC6-2R93
Version ranges need review.
github.com/go-chi/chi/v5
Go
Medium
Fix reported
2026-10-03
chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header
CVE-2026-72816 · GHSA-RJR7-JGGH-PGCP
github.com/go-chi/chi/middleware
github.com/go-chi/chi/v2/middleware
Go
Red Hat
High
Fix reported
2026-09-10
chi Middleware Vulnerable to Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` Resolution
CVE-2026-72817 · GHSA-9G5Q-2W5X-HMXF
github.com/go-chi/chi/middleware
github.com/go-chi/chi/v2/middleware
Go
Red Hat
High
Fix reported
2026-09-10
chi has an open redirect vulnerability in the RedirectSlashes middleware
CVE-2025-69725 · GHSA-MQQF-5WVP-8FH8
Version ranges need review.
github.com/go-chi/chi/v2
github.com/go-chi/chi/v3
Go
Red Hat
Medium
Fix reported
2026-09-10
