github.com/go-chi/chi/v5 vulnerabilities
CVEs whose affected-version data names the github.com/go-chi/chi/v5 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
GO-2026-5777NoneChi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
▾ Sunlitgo-chi · github.com/go-chi/chi/v5via OSV
GO-2026-5775NoneChi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi
Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi
▾ Sunlitgo-chi · github.com/go-chi/chi/v5via OSV
GO-2026-5774NoneChi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi
Chi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi
▾ Sunlitgo-chi · github.com/go-chi/chi/v5via OSV
CVE-2025-69725Medium· 4.7chi has an open redirect vulnerability in the RedirectSlashes middleware
chi has an open redirect vulnerability in the RedirectSlashes middleware
▾ Sunlitgo-chi · github.com/go-chi/chi/v5EPSS 0.22%via OSV
CVE-2025-71405Mediumchi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes
chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes
▾ Sunlitgo-chi · github.com/go-chi/chi/v5EPSS 0.31%via OSV