MEDIUMGo
GHSA-3fxj-6jh8-hvhx· CVE-2026-72815, GO-2026-5774chi Has an IP Spoofing Vulnerability in `middleware.RealIP`
Modified: 9/10/2026
package
Go/github.com/go-chi/chi/v5/middleware
pkg:go/github.com/go-chi/chi/v5/middleware
HIGHGo
GHSA-9g5q-2w5x-hmxf· CVE-2026-72817, GO-2026-5775chi Middleware Vulnerable to Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` Resolution
Modified: 9/10/2026
HIGHGo
GHSA-rjr7-jggh-pgcp· CVE-2026-72816, GO-2026-5777chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header
Modified: 9/10/2026