← Packages
go-github-gorilla-csrf
CSRF prevention middleware for Go web applications
- Current
- 1.7.3
- License
- BSD-3-Clause
Advisory · 1
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- github.com/gorilla/csrf improperly validates TrustedOrigins allowing CSRF attacksOSV
- Summary
- Improper validation of TrustedOrigins allows CSRF attacks in github.com/gorilla/csrfOSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.17%FIRST
- Returned advisory
- GHSA-82ff-hg59-8x73OSV
- Returned advisory
- GO-2025-3884OSV
- Aliases
- GHSA-82ff-hg59-8x73, GO-2025-3884OSV
- KEV
- NoCISA
- CVSS_V4
- CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:UOSV
Description
Gorilla CSRF provides Cross-Site Request Forgery prevention middleware for Go web applications and services.
Changelog
PR · 1
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Checked | ||
Checked | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Not applicable No confirmed version upgrade; this monitor is not run. | — | |
Checked | Last attempted | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Checked |