CVSS 3.1
4.7 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:NCVE-2025-69725
Medium (4.7). EPSS 0.3% chance of exploitation in the next 30 days. Fixed in github.com/go-chi/chi/v5 5.2.4.
An Open Redirect vulnerability in the go-chi/chi >=5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
- CWE
- CWE-601
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-mqqf-5wvp-8fh8 | Go | github.com/go-chi/chi/v5 | >=5.2.2 <5.2.4 | 5.2.4 |
| GO-2026-4316 | Go | github.com/go-chi/chi | all versions | no fix published |
| GO-2026-4316 | Go | github.com/go-chi/chi/v2 | all versions | no fix published |
| GO-2026-4316 | Go | github.com/go-chi/chi/v3 | all versions | no fix published |
| GO-2026-4316 | Go | github.com/go-chi/chi/v4 | all versions | no fix published |
| GO-2026-4316 | Go | github.com/go-chi/chi/v5 | >=5.2.2 <5.2.4 | 5.2.4 |