go-chi/chi Security Advisories | GitStock

medium2026-10-23

chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For

GHSA-j6qf-3m9c-vwj3 · CVE-2026-114437

medium2026-06-25

chi Has an IP Spoofing Vulnerability in `middleware.RealIP`

GHSA-3fxj-6jh8-hvhx

high2026-06-25

chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header

GHSA-rjr7-jggh-pgcp

high2026-06-25

chi Middleware Vulnerable to Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` Resolution

GHSA-9g5q-2w5x-hmxf

medium2026-01-14

chi has an open redirect vulnerability in the RedirectSlashes middleware

GHSA-mqqf-5wvp-8fh8 · CVE-2025-69725

medium2025-06-20

chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes

GHSA-vrw8-fxc6-2r93 · CVE-2025-71405