An Open Redirect vulnerability in the go-chi/chi >=5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain.
Loading...
Loading...
Score 4.7 from GitHub Security Advisory published 2026-02-19. NVD baseline CVSS 4.7; sources differ by 0.0.
An Open Redirect vulnerability in the go-chi/chi >=5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain.
February 19, 2026
April 15, 2026
| Package | Vulnerable range | Fixed in | Dependents |
|---|---|---|---|
| github.com/go-chi/chi | — | — | — |
| github.com/go-chi/chi/v2 | — | — | — |
| github.com/go-chi/chi/v3 | — | — | — |
| github.com/go-chi/chi/v4 | — | — | — |
| github.com/go-chi/chi/v5 | — | 5.2.4 | — |
Every time one of our enrichment pipelines (NVD, MITRE cvelistV5, EPSS, CISA KEV, GHSA, OSV, vendor advisories) ran against this CVE. Most recent first.
See which npm, PyPI, Go, and Maven packages are affected by CVE-2025-69725
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.