github.com/go-chi/chi/v5: Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi. GO-2026-5777, CVE-2026-72816, GHSA-rjr7-jggh-pgcp.
osv.devquote checked- security advisory
- Your code1 thing to find
Nemotron fixes
In its own wordsmatches the page ✓
Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
What Teire looks for in your code
- github.com/go-chi/chi/v5/middleware.RealIP (go)
Does it reach your code?