{"schema_version":"1.3.1","id":"GO-2025-3770","modified":"2025-11-20T22:03:19Z","published":"2025-07-21T15:05:07Z","aliases":["GHSA-vrw8-fxc6-2r93"],"summary":"Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi","details":"Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi","affected":[{"package":{"name":"github.com/go-chi/chi/v5","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"5.2.1"},{"fixed":"5.2.2"}]}],"ecosystem_specific":{}}],"references":[{"type":"ADVISORY","url":"https://github.com/go-chi/chi/security/advisories/GHSA-vrw8-fxc6-2r93"},{"type":"FIX","url":"https://github.com/go-chi/chi/commit/1be7ad938cc9c5b39a9dea01a5c518848928ab65"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2025-3770","review_status":"REVIEWED"}}