GO-2026-5775

vendorUSosv

Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi

view advisory published 2026-07-24Licence: per source

Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-72817US—OT elevated—
go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan