VDB
GO-2025-3884
GO-2025-3884
PUBLISHED
CVSS 5.099999904632568 MEDIUM
Improper validation of TrustedOrigins allows CSRF attacks in github.com/gorilla/csrf
Risk Scores
CVSS 4.0
5.099999904632568
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | harbor-2.14 | * |
| chainguard | harbor-fips-2.12 | * |
| chainguard | harbor-2.12 | * |
| chainguard | harbor-2.13 | * |
| chainguard | harbor-2.11 | * |
| chainguard | zitadel-4 | * |
| chainguard | zitadel-3 | * |
| chainguard | harbor-fips-2.11 | * |
| chainguard | harbor-fips-2.14 | * |
| chainguard | harbor-fips-2.13 | * |
| github.com | gorilla/csrf | 1.7.3 |
| chainguard | harbor-2.15 | * |
| chainguard | harbor-2.14 | * |
Timeline
- Aug 29, 2025 CVE Published
- Feb 4, 2026 CVE Updated