github.com/gorilla/csrf

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

github.com/gorilla/csrf records in CISA KEV

No github.com/gorilla/csrf vulnerabilities are listed in CISA KEV.

1 record

TI-2025-30313 CVE-2025-47909 · GHSA-82ff-hg59-8x73

LOW 37

Hosts listed in TrustedOrigins implicitly allow requests from the corresponding HTTP origins, allowing network MitMs to perform CSRF attacks.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0017 Published 2025-08-29 Fixed CWE-346