Security: go-chi/chi
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
IP Spoofing Vulnerability in `middleware.RealIP`GHSA-3fxj-6jh8-hvhx published
May 22, 2026 by VojtechVitekModerate -
RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For headerGHSA-rjr7-jggh-pgcp published
May 22, 2026 by VojtechVitekModerate -
Open redirect vulnerability in the RedirectSlashes middlewareGHSA-mqqf-5wvp-8fh8 published
Jan 14, 2026 by pkieltykaModerate -
Host Header Injection Leads to Open Redirect in RedirectSlashesGHSA-vrw8-fxc6-2r93 published
Jun 20, 2025 by VojtechVitekModerate -
Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` ResolutionGHSA-9g5q-2w5x-hmxf published
May 22, 2026 by VojtechVitekModerate