129 matches found
CVE-2026-122132
The go-chi chi library (versions 5.2.2 through 5.5.0 ) contains an open redirect vulnerability within the RedirectSlashes middleware . Attackers can exploit this by embedding tab characters in request paths. Specifically, a URL-encoded tab can be used to craft a link that, when processed, results...
EUVD-2026-117086
go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes middleware that allows attackers to redirect victims to external hosts by embedding tab characters in request paths. Attackers can craft links with a URL-encoded tab, which browsers strip from the 301...
PT-2026-137154
go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes middleware that allows attackers to redirect victims to external hosts by embedding tab characters in request paths. Attackers can craft links with a URL-encoded tab, which browsers strip from the 301...
SUSE CVE-2026-118681
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...
CLEANSTART-2026-VB04097 Open Redirect vulnerability in the go-chi/chi >=5
Security vulnerability affects the step-cli package. An Open Redirect vulnerability in the go-chi/chi =5...
CVE-2026-72815-poc
CVE-2026-72815: go-chi/chi middleware.RealIP IP Spoofing PoC 日本語版 Overview This repository contains a local Proof of Concept PoC for CVE-2026-72815 GHSA-3fxj-6jh8-hvhx, an IP spoofing vulnerability in go-chi/chi's middleware.RealIP. The vulnerable middleware blindly trusts the first leftmost valu...
CLEANSTART-2026-YN83102 Open Redirect vulnerability in the go-chi/chi >=5
CVE-2025-69725 affects multiple packages. An Open Redirect vulnerability in the go-chi/chi =5. See references for individual vulnerability details...
Linux Distros Unpatched Vulnerability : CVE-2026-118681
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted...
CVE-2026-118681
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...
Authentication Bypass Using an Alternate Path or Channel
Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via the SupressNotFound middleware in middleware/supressnotfound.go. An unauthenticated attacker can send a request to a mounted path whose suffix also matches a public root route...
CVE-2026-118681
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...
CVE-2026-118681
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...
UBUNTU-CVE-2026-118681
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...
CVE-2026-118681
Versions of go-chi chi prior to 5.5.0 are vulnerable to an authentication bypass in the middleware.SupressNotFound component. The root cause is that the middleware calls Match with a live routing context, which incorrectly preserves a mounted router's parameter and child suffix during dispatch ag...
EUVD-2026-112387
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...
CVE-2026-118681
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...
CVE-2026-118681 go-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middleware
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...
CVE-2026-118681 go-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middleware
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...
CVE-2026-118681: go-chi chi: go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the…
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...
Go Chi Chi authorization issue vulnerability
Versions prior to go-chi chi 5.5.0 contain an authorization issue vulnerability. This vulnerability stems from authentication bypass in middleware.SupressNotFound; it involves calling Match using a real-time routing context while retaining parameters and sub-tags associated with the mounted route...