—
GO-2025-3770
Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi
Quick fix
GO-2025-3770 — github.com/go-chi/chi/v5: upgrade to the fixed version with the command below.
go get github.com/go-chi/chi/v5@v5.2.2Details
Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/go-chi/chi/v5
Introduced in:
5.2.1 Fixed in: 5.2.2 Fix
go get github.com/go-chi/chi/v5@v5.2.2