21739 matches found
CVE-2026-72816 go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware
go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...
CVE-2026-72816 go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware
go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...
CVE-2026-72817 go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For
go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP Request.RemoteAddr using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the fir...
CVE-2026-72815
go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log...
CVE-2026-72815
go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log...
CVE-2026-72815
The CVE-2026-72815 affects go-chi chi v5.2.1 up to, but not including, v5.3.0. The RealIP middleware blindly trusts the leftmost value of X-Forwarded-For, enabling an attacker to bypass IP-based ACLs and rate limits and forge log entries by spoofing the IP address. The issue is fixed in v5.3.0. R...
EUVD-2026-58630
go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log...
CVE-2026-72815 go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header
go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log...
CVE-2025-71405 go-chi chi before v5.2.2 Open Redirect via RedirectSlashes
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2025-71405 go-chi chi before v5.2.2 Open Redirect via RedirectSlashes
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2025-71405 go-chi chi before v5.2.2 Open Redirect via RedirectSlashes
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
GO-2026-4768 vulnerabilities
Vulnerabilities for packages: vale...
GO-2025-3838 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2025-3841 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2025-4071 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2026-5247 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, vault, splunk-otel-collector-fips, vault-fips...
GO-2026-5272 vulnerabilities
Vulnerabilities for packages: tekton-chains, tekton-pipelines-fips, tekton-pipelines, tkn, tkn-fips, tekton-chains-fips...
GO-2023-1901 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips...