MEDIUMGo
GHSA-82ff-hg59-8x73· CVE-2025-47909, GO-2025-3884github.com/gorilla/csrf improperly validates TrustedOrigins allowing CSRF attacks
Modified: 9/10/2026
package
Go/github.com/gorilla/csrf
pkg:go/github.com/gorilla/csrf
MEDIUMGo
GHSA-rq77-p4h8-4crw· CVE-2025-24358, GO-2025-3607gorilla/csrf CSRF vulnerability due to broken Referer validation
Modified: 9/10/2026
—Go
GO-2025-3607· CVE-2025-24358, GHSA-rq77-p4h8-4crwgorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf
Modified: 2/4/2026
—Go
GO-2025-3884· CVE-2025-47909, GHSA-82ff-hg59-8x73Improper validation of TrustedOrigins allows CSRF attacks in github.com/gorilla/csrf
Modified: 2/4/2026