[Git][security-tracker-team/security-tracker][master] Add new go-chi issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7e734e17 by Salvatore Bonaccorso at 2026-08-14T21:44:49+02:00
Add new go-chi issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -69,11 +69,14 @@ CVE-2026-72820 (Grav versions before 2.0.13 fail to properly validate backup pro
 CVE-2026-72819 (Grav CMS before 2.0.13 contains a remote code execution vulnerability  ...)
 	NOT-FOR-US: Grav CMS
 CVE-2026-72817 (go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnera ...)
-	TODO: check
+	- golang-github-go-chi-chi 5.3.0-1
+	NOTE: https://github.com/go-chi/chi/security/advisories/GHSA-9g5q-2w5x-hmxf
 CVE-2026-72816 (go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the  ...)
-	TODO: check
+	- golang-github-go-chi-chi 5.3.0-1
+	NOTE: https://github.com/go-chi/chi/security/advisories/GHSA-rjr7-jggh-pgcp
 CVE-2026-72815 (go-chi chi versions >= 5.2.1 and before 5.3.0 contain an IP spoofing v ...)
-	TODO: check
+	- golang-github-go-chi-chi 5.3.0-1
+	NOTE: https://github.com/go-chi/chi/security/advisories/GHSA-3fxj-6jh8-hvhx
 CVE-2026-72814 (The actix-files crate (actix_files) before version 0.6.10 contains an  ...)
 	TODO: check
 CVE-2026-72813 (actix-files before 0.6.10 contains a denial of service vulnerability t ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e734e1797f27b46ff6361b75ebedea86a8fe49d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e734e1797f27b46ff6361b75ebedea86a8fe49d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260814/51a58a62/attachment.htm>