GHSA-rjr7-jggh-pgcp: chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header
realip middleware in go-chi/chi trusts headers like x-forwarded-for without checking them, so attackers can fake their ip and bypass rate limits or access controls
References
Code Behaviors & Features
Detect and mitigate GHSA-rjr7-jggh-pgcp with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →