Start for Free
go

github.com/go-chi/chi/v5

View on go registry
10 Total advisories
10 Vulnerabilities
0 Malware

Dependency scanning

Check whether github.com/go-chi/chi/v5 is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

MEDIUM 4.8
Go

CVE-2026-114437

chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
MEDIUM 4.8
Go

GHSA-7cgw-qmxx-7fc2

Duplicate Advisory: chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
UNKNOWN
Go

CVE-2025-71405

chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes
MEDIUM 4.7
Go

CVE-2025-69725

chi has an open redirect vulnerability in the RedirectSlashes middleware
UNKNOWN
Go

CVE-2026-72816

Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
UNKNOWN
Go

CVE-2026-72817

Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi
UNKNOWN
Go

CVE-2025-71405

Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi
UNKNOWN
Go

CVE-2026-72815

Chi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi
UNKNOWN
Go

CVE-2025-69725

Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi
MEDIUM 4.7
Go

GHSA-4h76-926q-wxxw

Duplicate Advisory: chi has an open redirect vulnerability in the RedirectSlashes middleware

Browse more Go advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes