gorilla

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

gorilla records in CISA KEV

No gorilla vulnerabilities are listed in CISA KEV.

2 records

TI-2024-24810 CVE-2024-37298 · GHSA-3669-72x9-r9p3

HIGH 72

gorilla/schema converts structs to and from form values.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01096 Published 2024-07-01 Partial fix · 1.4.1 CWE-770

TI-2025-18101 CVE-2025-24358 · GHSA-rq77-p4h8-4crw

MEDIUM 58

gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services.

CVSS 4.0MEDIUM 5.4 Network No auth User interaction EPSS 0.00374 Published 2025-04-15 Fixed in 1.7.3 CWE-352