go-github-gin-gonic-gin
Gin is a high-performance HTTP web framework written in Go. It provides a Martini-like API but with significantly better performance—up to 40 times faster—thanks to httprouter. Gin is designed for building REST APIs, web applications, and microservices.
- Current
- 1.8.1
- Candidate
- 1.12.0
- License
- MIT
BuildDeps
Advisory · 2
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment functionOSV
- Summary
- Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/ginOSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.482%FIRST
- Returned advisory
- GHSA-2c4m-59x9-fr2gOSV
- Returned advisory
- GO-2023-1737OSV
- Aliases
- GHSA-2c4m-59x9-fr2g, GO-2023-1737OSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NOSV
Description
Gin is a high-performance HTTP web framework written in Go (https://go.dev/). It provides a Martini-like API but with significantly better performance—up to 40 times faster—thanks to httprouter (https://github.com/julienschmidt/httprouter). Gin is designed for building REST APIs, web applications, and microservices where speed and developer productivity are essential.
Changelog
PR · 4
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Checked | ||
Checked | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Checked Compared same-provider, same-project SPDX metadata for this version pair. | ||
Checked | Last attempted | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Checked |