github.com/go-chi/chi/v5 vulnerabilities
CVEs whose affected-version data names the github.com/go-chi/chi/v5 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-114437Medium· 4.8PoCchi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
▾ Twilightgo-chi · github.com/go-chi/chi/v5EPSS 0.13%via OSV
GHSA-7cgw-qmxx-7fc2Medium· 4.8Duplicate Advisory: chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
Duplicate Advisory: chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
▾ Sunlitgo-chi · github.com/go-chi/chi/v5via GHSA
GO-2026-5777NoneChi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
▾ Sunlitgo-chi · github.com/go-chi/chi/v5via OSV
GO-2026-5775NoneChi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi
Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi
▾ Sunlitgo-chi · github.com/go-chi/chi/v5via OSV
GO-2026-5774NoneChi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi
Chi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi
▾ Sunlitgo-chi · github.com/go-chi/chi/v5via OSV
CVE-2025-69725Medium· 4.7chi has an open redirect vulnerability in the RedirectSlashes middleware
chi has an open redirect vulnerability in the RedirectSlashes middleware
▾ Sunlitgo-chi · github.com/go-chi/chi/v5EPSS 0.26%via OSV