Skip to content
OpenAdvisories

Package · Go

github.com/gorilla/csrf

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2025-24358

    gorilla/csrf CSRF vulnerability due to broken Referer validation

    gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services. Prior to 1.7.2, gorilla/csrf does not validate the Origin header against an allowlist. Its executes its validation of the Referer header for cros…

    gorilla csrf golang-github-gorilla-csrf github.com/gorilla/csrf Debian Ubuntu Go