237 matches found
CVE-2025-69725
An Open Redirect vulnerability in the go-chi/chi =5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain...
chi 安全漏洞
Chi is a routing tool developed by Go-Chi. Versions of Chi 5.2.2 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the RedirectSlashes function, which had an open redirection feature, potentially redirecting victim users to malicious websites...
CVE-2025-69725: URL Redirection to Untrusted Site
An Open Redirect vulnerability in the go-chi/chi =5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain...
CVE-2025-69725
An Open Redirect vulnerability in the go-chi/chi =5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain...
Linux Distros Unpatched Vulnerability : CVE-2025-69725
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Open Redirect vulnerability in the go-chi/chi =5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using th...
CVE-2025-69725
CVE-2025-69725 affects go-chi/chi versions >= 5.2.2, specifically the RedirectSlashes function, which enables an Open Redirect vulnerability. The issue allows remote attackers to redirect users to malicious sites using the legitimate domain. The provided metrics indicate a CVSS v3.1 base score...
CVE-2025-69725
An Open Redirect vulnerability in the go-chi/chi =5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain...
GO-2026-4316 Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi
Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the RedirectSlashes function. An attacker can redirect users to an external, attacker-controlled website by crafting a specially formatted URL containing backslashes, which browsers interpret as a protocol-relative...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the RedirectSlashes function. An attacker can redirect users to an external, attacker-controlled website by crafting a specially formatted URL containing backslashes, which browsers interpret as a protocol-relative...
PT-2026-20864
Name of the Vulnerable Software and Affected Versions go-chi/chi versions 5.2.2 and later Description An Open Redirect issue exists in the RedirectSlashes function of the go-chi/chi web framework. This flaw allows attackers to create malicious URLs that redirect users to arbitrary external sites,...
PT-2026-6453
Summary The RedirectSlashes function in middleware/strip.go does not perform correct input validation and can lead to an open redirect vulnerability. Details The RedirectSlashes function performs a Trim to all forward slash / characters, while prepending a single one at the begining of the path...
CVE-2021-31641
An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, BF-MINI-W, and SEMAC due to a lack of sanitization when the HTTP 404 message is generated...
Emoji-Based Jailbreaking of Large Language Models
Large Language Models LLMs are integral to modern AI applications, but their safety alignment mechanisms can be bypassed through adversarial prompt engineering. This study investigates emoji-based jailbreaking, where emoji sequences are embedded in textual prompts to trigger harmful and unethical...
djangogoboot (1.0.2), foodx-devops-tools (>=0.0.0.post65, <=0.12.0) +3 more potentially affected by CVE-2025-14010 via ansible (4.10.0)
ansible PYPI version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - djangogoboot 1.0.2 - foodx-devops-tools =0.0.0.post65, =11.0.0.0rc1, =0.0.1, =0.3.0, =0.7.1 Source cves: CVE-2025-14010 Source advisory:...
EUVD-2025-179746
Malicious code in chi-iota-decompress-sed-emulate npm...
EUVD-2025-177498
Malicious code in object-chi-yaml-authorize-zero npm...
EUVD-2025-176083
Malicious code in table-link-chi-grid-byte npm...