981445 matches found
CVE-2025-71405 go-chi chi before v5.2.2 Open Redirect via RedirectSlashes
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2025-71405
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2025-71405 go-chi chi before v5.2.2 Open Redirect via RedirectSlashes
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2025-71405
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
Open Redirect
Spring Security is vulnerable to Open Redirect. The vulnerability is due to CookieRequestCache and CookieServerRequestCache storing and using an unvalidated absolute URL from a browser cookie as the post-login redirect target, allowing an attacker to redirect users to a malicious destination...
GO-2024-2907 vulnerabilities
Vulnerabilities for packages: nuclei...
GO-2025-3604 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GO-2024-2576 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, kaniko-fips, argo-events, kubevela, argocd-image-updater-fips, pulumi-language-dotnet, k9s, src-fingerprint-fips, gptscript, bom, wolfictl, scorecard, pulumi-language-yaml, packer-fips, kaniko, pulumi-kubernetes-operator, flux-kustomize-controller...
GO-2026-5005 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, argo-cd-fips, teleport-operator-fips, prometheus-mongodb-exporter, vitess, opentelemetry-collector, vault-fips, elastic-agent-fips, snyk-cli, frankenphp-8.2, aactl, opentofu, cert-manager, gitlab-kas, containerd, grafana, terraform, kine, kyverno,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: sigstore-scaffolding-fips, jfrog-cli, commercial-chainloop-backend, gh, ko-fips, cloudbeat-fips, zarf-fips, teleport-operator-fips, ratify, slsa-verifier, tflint, teleport, falcoctl, docker-cli-buildx, chainctl, kyverno-notation-aws-fips, policy-controller-fips,...
GO-2026-5593 vulnerabilities
Vulnerabilities for packages: traefik, sftpgo...
GO-2022-0574 vulnerabilities
Vulnerabilities for packages: opa...
GO-2022-0587 vulnerabilities
Vulnerabilities for packages: opa...
GO-2026-4962 vulnerabilities
Vulnerabilities for packages: mattermost...
GO-2025-3565 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2025-3988 vulnerabilities
Vulnerabilities for packages: sftpgo, gitea...
GO-2024-2476 vulnerabilities
Vulnerabilities for packages: dex...
GO-2026-5029 vulnerabilities
Vulnerabilities for packages: k3s, vale, prometheus-operator, kyverno, crossplane-provider-azure-authorization, grafana-pyroscope, prometheus, fq, helm, ingress-nginx-controller, crossplane-provider-aws-elasticache, kots, external-secrets-operator, kine, karpenter, traefik, minio, falco-no-driver...