CVE-2025-71405

Name of the Vulnerable Software and Affected Versions chi versions prior to v5.2.2

Description The RedirectSlashes() middleware function uses the Host header to construct redirect URLs. An attacker can manipulate this header to redirect users to arbitrary external hosts, which can be used to facilitate phishing attacks and the theft of credentials.

Recommendations Update to version v5.2.2 or later. As a temporary workaround, consider disabling the RedirectSlashes() middleware function until the update is applied.