Go/github.com/go-chi/chi/v5: medium 4.8
Duplicate Advisory: chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.3.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7cgw-qmxx-7fc2
- https://github.com/go-chi/chi/security/advisories/GHSA-j6qf-3m9c-vwj3
- https://nvd.nist.gov/vuln/detail/CVE-2026-114437
- https://www.tenable.com/security/research/tra-2026-66
published · modified · JSON