| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-118681 | vulnerable | vulnerable | vulnerable | vulnerable | go-chi chi before 5.5.0 contains an authentication bypass in middlewar ... |
| CVE-2026-114437 | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | In the Golang Chi web framework, the ClientIPFromXFF middleware skips ... |
| CVE-2026-72817 | vulnerable (no DSA, ignored) | vulnerable (no DSA) | fixed | fixed | go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnera ... |
| CVE-2026-72816 | vulnerable (no DSA, ignored) | vulnerable (no DSA) | fixed | fixed | go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the ... |
| CVE-2026-72815 | vulnerable (no DSA, ignored) | vulnerable (no DSA) | fixed | fixed | go-chi chi versions >= 5.2.1 and before 5.3.0 contain an IP spoofing v ... |
| CVE-2025-71405 | vulnerable (no DSA, ignored) | vulnerable (no DSA) | fixed | fixed | chi versions before v5.2.2 contain an open redirect vulnerability in t ... |