VDB
GHSA-vrw8-fxc6-2r93
GHSA-vrw8-fxc6-2r93
PUBLISHED
CVSS 5.400000095367432 MEDIUM
chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | telegraf-1.32 | 0 |
| wolfi | step-ca | 0 |
| chainguard | gogatekeeper | 0, 0, 0 |
| chainguard | telegraf-1.35 | 0 |
| wolfi | tkn | 0 |
| chainguard | step | 0 |
| chainguard | gitness | 0 |
| chainguard | dapr-fips-1.14 | 0 |
| chainguard | dapr-fips-1.15 | 0 |
| chainguard | step-ca-fips | 0, 0, 0 |
| chainguard | step-fips | 0, 0, 0 |
| wolfi | step-issuer | 0, 0, 0 |
| chainguard | cloudflared | 0 |
| Go | github.com/go-chi/chi/v5 | 0 |
| chainguard | step-ca | 0 |
| chainguard | buf | 0, 0, 0 |
| wolfi | step | 0 |
| chainguard | telegraf-1.34 | 0 |
| chainguard | telegraf-1.33 | 0, 0 |
| chainguard | fleet-server-fips | 0, 0, 0 |
…and 33 more
Timeline
- Jun 20, 2025 CVE Published
- Nov 10, 2025 CVE Updated