Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: go-chi chi 5.3.0 Clear all filters
TI-2026-51043 CVE-2026-72817 · GHSA-9f4g-6whf-f3pv

go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For

Priority LOW 36

go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without va…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00242 Published 2026-08-14 Partial fix · 5.3.0 CWE-345
TI-2026-51042 CVE-2026-72816 · GHSA-xg24-pmhh-m4m9

go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware

Priority HIGH 70

go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware (middleware/realip.go).

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.003 Published 2026-08-14 Partial fix · 5.3.0 CWE-290
TI-2026-51041 CVE-2026-72815 · GHSA-qgxv-hqxp-4rcx

go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header

Priority HIGH 70

go-chi chi versions >= 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first (leftmost) value of the X-Forwarded-For HTTP header.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00495 Published 2026-08-14 Partial fix · 5.3.0 CWE-290