252 matches found
Malicious code in emulate-boolean-info-enum-chi (npm)
The package emulate-boolean-info-enum-chi was found to contain malicious code...
Malicious code in old-throw-chi-boolean-slow (npm)
The package old-throw-chi-boolean-slow was found to contain malicious code...
MAL-2025-16974 Malicious code in chi-notify-info-theta-decode (npm)
The package chi-notify-info-theta-decode was found to contain malicious code...
MAL-2025-19882 Malicious code in eta-chi-socket-easy-module (npm)
The package eta-chi-socket-easy-module was found to contain malicious code...
Malicious code in balance-chi-decompress-chi-code (npm)
The package balance-chi-decompress-chi-code was found to contain malicious code...
MAL-2025-27357 Malicious code in new-chi-awk-alert-refactor (npm)
The package new-chi-awk-alert-refactor was found to contain malicious code...
MAL-2025-16975 Malicious code in chi-old-encrypt-grep-delta (npm)
The package chi-old-encrypt-grep-delta was found to contain malicious code...
MAL-2025-19635 Malicious code in emulate-boolean-info-enum-chi (npm)
The package emulate-boolean-info-enum-chi was found to contain malicious code...
MAL-2025-9865 Malicious code in @zalastax/nolb-_chi (npm)
The package @zalastax/nolb-chi was found to contain malicious code...
MAL-2025-28204 Malicious code in old-throw-chi-boolean-slow (npm)
The package old-throw-chi-boolean-slow was found to contain malicious code...
Malicious code in new-chi-awk-alert-refactor (npm)
The package new-chi-awk-alert-refactor was found to contain malicious code...
MAL-2025-32667 Malicious code in sandbox-thread-easy-char-chi (npm)
The package sandbox-thread-easy-char-chi was found to contain malicious code...
MAL-2025-15341 Malicious code in balance-chi-decompress-chi-code (npm)
The package balance-chi-decompress-chi-code was found to contain malicious code...
Malicious code in sandbox-thread-easy-char-chi (npm)
The package sandbox-thread-easy-char-chi was found to contain malicious code...
GO-2025-3770 Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi
Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi...
Host Header Injection
github.com/go-chi/chi is vulnerable to host header injection. The vulnerability is due to improper validation of the Host header in the RedirectSlashes function, allowing an attacker to manipulate redirects...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the RedirectSlashes function. An attacker can redirect users to arbitrary external sites by manipulating the Host header in HTTP requests. Remediation A fix was pushed into the master branch but not yet published...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the RedirectSlashes function. An attacker can redirect users to arbitrary external sites by manipulating the Host header in HTTP requests. Remediation Upgrade github.com/go-chi/chi/v5/middleware to version 5.2.2 or...
GHSA-VRW8-FXC6-2R93 chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes
Summary The RedirectSlashes function in middleware/strip.go is vulnerable to host header injection which leads to open redirect. We consider this a lower-severity open redirect, as it can't be exploited from browsers or email clients requires manipulation of a Host header. Details The...
PT-2026-71978
Name of the Vulnerable Software and Affected Versions chi versions prior to v5.2.2 Description The RedirectSlashes middleware function uses the Host header to construct redirect URLs. An attacker can manipulate this header to redirect users to arbitrary external hosts, which can be used to...