992092 matches found
CVE-2025-71405 go-chi chi before v5.2.2 Open Redirect via RedirectSlashes
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2025-71405
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2025-71405 go-chi chi before v5.2.2 Open Redirect via RedirectSlashes
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2025-71405
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2025-71405 go-chi chi before v5.2.2 Open Redirect via RedirectSlashes
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
EUVD-2025-210728
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2025-71405
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
Malware in money-badger-open-rpc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Open Redirect
Spring Security is vulnerable to Open Redirect. The vulnerability is due to CookieRequestCache and CookieServerRequestCache storing and using an unvalidated absolute URL from a browser cookie as the post-login redirect target, allowing an attacker to redirect users to a malicious destination...
GO-2024-2907 vulnerabilities
Vulnerabilities for packages: nuclei...
GO-2025-3604 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GO-2024-2576 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: chezmoi, flux-source-controller, gitea-fips, grafana-alloy, pulumi-language-dotnet, trivy-fips, packer, flux, argo-events, flux-image-automation-controller-fips, gitsign, flux-kustomize-controller-fips, k8sgpt, k9s, gptscript, pulumi, pulumi-kubernetes-operator,...
GO-2026-5005 vulnerabilities
Vulnerabilities for packages: rancher, kube-arangodb-fips, gatekeeper-fips, podman, opentofu, istio, opentelemetry-collector, prometheus-fips, grafana-fips, falco-no-driver, tekton-pipelines-fips, kubernetes-dashboard, grafana, prometheus, rancher-agent, argo-cd-fips, vitess, commercial-kyverno,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: ratify-fips, falcoctl-fips, tflint, flux-source-controller, cg, kubescape-server, commercial-chainloop-backend, kubescape-server-fips, kyverno-policy-reporter-plugins-kyverno-fips, slsa-verifier, buildkitd-fips, cosign-fips, cosign, docker-cli-buildx, trivy-fips,...
GO-2026-5593 vulnerabilities
Vulnerabilities for packages: traefik, sftpgo...
GO-2022-0587 vulnerabilities
Vulnerabilities for packages: opa...
GO-2026-4962 vulnerabilities
Vulnerabilities for packages: mattermost...