CVE-2026-114437
1 advisory.
Go/github.com/go-chi/chi/v5 CVE-2026-114437: medium 4.8, EPSS 0.13%
chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
Action: Upgrade github.com/go-chi/chi/v5 to 5.4.0 or later.
go get github.com/go-chi/chi/v5@v5.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.4.0 | - |
Fixed versions
| 5.4.0 |
Sources
- osv: GHSA-j6qf-3m9c-vwj3
- https://github.com/go-chi/chi/security/advisories/GHSA-j6qf-3m9c-vwj3
- https://nvd.nist.gov/vuln/detail/CVE-2026-114437
- https://github.com/go-chi/chi/pull/1214
- https://github.com/go-chi/chi/commit/7f9b7448f51d28804fac98c0a17bc2a7cec1079f
- https://github.com/go-chi/chi
- https://github.com/go-chi/chi/releases/tag/v5.4.0
- https://www.tenable.com/security/research/tra-2026-66
CVE-2026-114437 · published · modified · JSON