CH
Product
chi
by go-chi · last CVE Oct 28, 2026
6
CVEs
0
On KEV
6.9
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 5Low 1
Watch

Add chi to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-72815
6.9
0%
Aug 14
go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header
Affected: 5.2.1 before 5.3.0
CVE-2026-72817
6.5
0%
Aug 14
go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For
Affected: 0.9.0 before 5.3.0
CVE-2026-72816
6.5
0%
Aug 14
go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware
Affected: before 5.3.0
CVE-2025-71405
5.1
0%
Aug 14
go-chi chi before v5.2.2 Open Redirect via RedirectSlashes
Affected: before 5.2.2
CVE-2026-114437
4.8
0%
Oct 21
Chi Client IP Spoofing in ClientIPFromXFF via X-Forwarded-For
Affected: before 5.4.0
CVE-2026-118681
New
3.7–Oct 28
go-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middleware
Affected: before 5.5.0
Showing 6