Go-Chi

4 CVEs across 1 Go-Chi products. Browse Go-Chi vulnerabilities, severities, and proof-of-concept exploits.

Go-Chi products with known CVEs

ProductCVEs
Chi4
Go-Chi CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-72817Medium6.52026-08-14go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr…
CVE-2026-72816Medium6.52026-08-14go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware (middleware/realip.go). The realIP() function reads client-controlled h…
CVE-2026-728152026-08-14go-chi chi versions >= 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first (leftmost) value of…
CVE-2025-714052026-08-14chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect UR…