VDB
KO

GO-2026-5774

Chi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi

Quick fix

GO-2026-5774 — github.com/go-chi/chi/v5: upgrade to the fixed version with the command below.

go get github.com/go-chi/chi/v5@v5.3.0

Details

Chi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/go-chi/chi/v5
Introduced in: 5.2.1 Fixed in: 5.3.0
Fix go get github.com/go-chi/chi/v5@v5.3.0

References