CVE-2025-46721
2 advisories.
Go/github.com/justinas/nosurf CVE-2025-46721: medium, EPSS 0.24%
nosurf vulnerable to CSRF due to non-functional same-origin request checks
Action: Upgrade github.com/justinas/nosurf to 1.2.0 or later.
go get github.com/justinas/nosurf@v1.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.0 | - |
Fixed versions
| 1.2.0 |
Sources
- osv: GHSA-w9hf-35q4-vcjw
- https://github.com/justinas/nosurf/security/advisories/GHSA-w9hf-35q4-vcjw
- https://nvd.nist.gov/vuln/detail/CVE-2025-46721
- https://github.com/justinas/nosurf/commit/ec9bb776d8e5ba9e906b6eb70428f4e7b009feee
- https://github.com/advisories/GHSA-rq77-p4h8-4crw
- https://github.com/justinas/nosurf
- https://github.com/justinas/nosurf-cve-2025-46721
- https://github.com/justinas/nosurf/releases/tag/v1.2.0
CVE-2025-46721 · published · modified · JSON
Go/github.com/justinas/nosurf CVE-2025-46721: unknown, EPSS 0.24%
Vulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf
Action: Upgrade github.com/justinas/nosurf to 1.2.0 or later.
go get github.com/justinas/nosurf@v1.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.0 | - |
Fixed versions
| 1.2.0 |
Sources
- osv: GO-2025-3683
- https://github.com/justinas/nosurf/security/advisories/GHSA-w9hf-35q4-vcjw
- https://github.com/justinas/nosurf/commit/ec9bb776d8e5ba9e906b6eb70428f4e7b009feee
- https://github.com/advisories/GHSA-rq77-p4h8-4crw
- https://github.com/justinas/nosurf-cve-2025-46721
- https://github.com/justinas/nosurf/releases/tag/v1.2.0
CVE-2025-46721 · published · modified · JSON