TI-2026-51042 CVE-2026-72816 · GHSA-xg24-pmhh-m4m9
go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware
Priority HIGH 70
go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware (middleware/realip.go).
RHSA-2026:54420
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-08-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Hardened Images cosign-3.1.3-0.1.hum1@aarch64, cosign-3.1.3-0.1.hum1@src, cosign-3.1.3-0.1.hum1@x86_64
Fixes 3 records
TI-2026-51041 CVE-2026-72815 · GHSA-qgxv-hqxp-4rcx
go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header
Priority HIGH 70
go-chi chi versions >= 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first (leftmost) value of the X-Forwarded-For HTTP header.
TI-2026-51043 CVE-2026-72817 · GHSA-9f4g-6whf-f3pv
go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For
Priority LOW 36
go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without va…