15797 matches found
CVE-2026-72815
The CVE-2026-72815 affects go-chi chi v5.2.1 up to, but not including, v5.3.0. The RealIP middleware blindly trusts the leftmost value of X-Forwarded-For, enabling an attacker to bypass IP-based ACLs and rate limits and forge log entries by spoofing the IP address. The issue is fixed in v5.3.0. R...
EUVD-2026-58630
go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log...
CVE-2026-72815
go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log...
CVE-2026-72815 go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header
go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log...
CVE-2025-71405 go-chi chi before v5.2.2 Open Redirect via RedirectSlashes
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2025-71405 go-chi chi before v5.2.2 Open Redirect via RedirectSlashes
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
GO-2026-4768 vulnerabilities
Vulnerabilities for packages: vale...
GO-2025-3839 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2025-3842 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2026-5262 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, vault, splunk-otel-collector-fips, vault-fips...
GO-2025-4272 vulnerabilities
Vulnerabilities for packages: temporal, temporal-fips...
GO-2024-3299 vulnerabilities
Vulnerabilities for packages: traefik...
GO-2026-5128 vulnerabilities
Vulnerabilities for packages: traefik, traefik-fips...
GO-2026-4880 vulnerabilities
Vulnerabilities for packages: traefik, traefik-fips...
GO-2026-5711 vulnerabilities
Vulnerabilities for packages: tekton-chains-fips, tkn, tkn-fips, tekton-chains, tekton-pipelines, tekton-pipelines-fips...
GO-2026-4679 vulnerabilities
Vulnerabilities for packages: traefik, traefik-fips...
GO-2025-3838 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2025-3841 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...