Real-time CVE monitoring
CVE alerts for
Go
CVEye scans every new CVE and notifies your team the moment Go is affected — before attackers can exploit it.
Monitor Go free →No credit card · 7-day trial
Recent Go CVEs
In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http.Request.RemoteAddr belongs to that CIDR. A client that can reach the Go server directly can therefore append a trusted-looking proxy address and choose the client IP returned by middleware.GetClientIP. This issue affects chi before 5.4.0.
Never miss a Go vulnerability
CVEye monitors Go and your entire stack 24/7, sending instant alerts via email, Slack, Discord, or webhook the moment a new CVE is published.
7-day free trial · No credit card required