CyberSecBulletin

Github.com/gorilla/csrf vulnerabilities

We track 1 vulnerability in Github.com/gorilla/csrf products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 29, 2025.

1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score

Latest Github.com/gorilla/csrf vulnerabilities

  • 7.3 High severity

    github.com/gorilla/csrf: Origin Validation Error

    CVE-2025-47909Github.com/gorilla/csrf

    Hosts listed in TrustedOrigins implicitly allow requests from the corresponding HTTP origins, allowing network MitMs to perform CSRF attacks. After the CVE-2025-24358 fix, a network attacker that places a form at http://example.com can't get it to submit to ht