https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:10:24 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-354428 EUVD-2026-354428 https://cve.radiocsirt.org/vuln/euvd-2026-354428 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72817 <p>go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the first value of the X-Forwarded-For header to spoof the request source IP, potentially bypassing access controls or falsifying request logs.</p> <p>go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the first value of the X-Forwarded-For header to spoof the request source IP, potentially bypassing access controls or falsifying request logs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72817 https://cve.radiocsirt.org/vuln/ghsa-9f4g-6whf-f3pv <p>go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the first value of the X-Forwarded-For header to spoof the request source IP, potentially bypassing access controls or falsifying request logs.</p> <p>go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the first value of the X-Forwarded-For header to spoof the request source IP, potentially bypassing access controls or falsifying request logs.</p> https://cve.radiocsirt.org/vuln/ghsa-9f4g-6whf-f3pv https://cve.radiocsirt.org/vuln/msrc_cve-2026-72817 msrc_CVE-2026-72817 https://cve.radiocsirt.org/vuln/msrc_cve-2026-72817 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11574-1 <p>hauler-2.0.3-1.1 on GA media</p> <p>hauler-2.0.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11574-1 https://cve.radiocsirt.org/vuln/rhsa-2026:49718 <p>github.com/go-chi/chi/middleware: go-chi chi: IP spoofing via X-Forwarded-For header allows bypass of access controls github.com/go-chi/chi: go-chi/chi: IP Spoofing via RealIP Middleware allows bypassing access controls github.com/go-chi/chi/middleware: go-chi/chi: IP spoofing via X-Forwarded-For header manipulation</p> <p>github.com/go-chi/chi/middleware: go-chi chi: IP spoofing via X-Forwarded-For header allows bypass of access controls github.com/go-chi/chi: go-chi/chi: IP Spoofing via RealIP Middleware allows bypassing access controls github.com/go-chi/chi/middleware: go-chi/chi: IP spoofing via X-Forwarded-For header manipulation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:49718 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-72817 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-github-go-chi-chi, Ubuntu:24.04:LTS: golang-github-go-chi-chi, Ubuntu:26.04:LTS: golang-github-go-chi-chi</p> <p>go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the first value of the X-Forwarded-For header to spoof the request source IP, potentially bypassing access controls or falsifying request logs.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-github-go-chi-chi, Ubuntu:24.04:LTS: golang-github-go-chi-chi, Ubuntu:26.04:LTS: golang-github-go-chi-chi</p> <p>go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the first value of the X-Forwarded-For header to spoof the request source IP, potentially bypassing access controls or falsifying request logs.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-72817