Go/github.com/justinas/nosurf CVE-2025-46721: medium 6.1, EPSS 0.24%
nosurf vulnerable to CSRF due to non-functional same-origin request checks
Action: Upgrade github.com/justinas/nosurf to 1.2.0 or later.
go get github.com/justinas/nosurf@v1.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.0 | - |
Fixed versions
| 1.2.0 |
Sources
- osv: GHSA-w9hf-35q4-vcjw
- nvd: CVE-2025-46721
- https://github.com/justinas/nosurf/security/advisories/GHSA-w9hf-35q4-vcjw
- https://github.com/justinas/nosurf/commit/ec9bb776d8e5ba9e906b6eb70428f4e7b009feee
- https://github.com/advisories/GHSA-rq77-p4h8-4crw
- https://github.com/justinas/nosurf
- https://github.com/justinas/nosurf-cve-2025-46721
- https://github.com/justinas/nosurf/releases/tag/v1.2.0
CVE-2025-46721 · published · modified · JSON