Skip to content
OpenAdvisories
Medium DLA-4151-1 1 CVE

golang-github-gorilla-csrf - security update

Published May 1, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 golang-github-gorilla-csrf 1.6.2-2+deb11u1

Vulnerabilities 1

  • Medium 5.4
    CVE-2025-24358

    gorilla/csrf CSRF vulnerability due to broken Referer validation

    gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services. Prior to 1.7.2, gorilla/csrf does not validate the Origin header against an allowlist. Its executes its validation of the Referer header for cros…

    gorilla csrf harbor-2.14 harbor-2.14-jobservice Debian Ubuntu Wolfi Go