HIGH7.5Go
GHSA-5x84-q523-vvwr· CVE-2020-36564, GO-2020-0049nosurf vulnerable to improper input validation
Modified: 11/8/2023
package
Go/github.com/justinas/nosurf
pkg:go/github.com/justinas/nosurf
MEDIUMGo
GHSA-w9hf-35q4-vcjw· CVE-2025-46721, GO-2025-3683nosurf vulnerable to CSRF due to non-functional same-origin request checks
Modified: 2/4/2026
—Go
GO-2020-0049· CVE-2020-36564, GHSA-5x84-q523-vvwrImproper input validation in github.com/justinas/nosurf
Modified: 5/20/2024
—Go
GO-2025-3683· CVE-2025-46721, GHSA-w9hf-35q4-vcjwVulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf
Modified: 6/12/2025