Go/github.com/gorilla/csrf CVE-2025-47909: high 7.3, EPSS 0.17%

Improper validation of TrustedOrigins allows CSRF attacks in github.com/gorilla/csrf

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-3884
• nvd: CVE-2025-47909
• https://github.com/golang/vulndb/issues/3884

CVE-2025-47909 · published 2025-08-29T15:42:26Z · modified 2026-02-04T03:41:13.079076Z · JSON