CVE-2025-69725
Medium · 4.7CVSS
4.7
EPSS
0.3%
Published
Feb 19, 2026
CISA due date
—
The record
An Open Redirect vulnerability in the go-chi/chi >=5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/go-chi/chi | 0 | No fix |
| Go | github.com/go-chi/chi | 5.2.2 | 5.2.4 |
| Go | github.com/go-chi/chi/v2 | 0 | No fix |
| Go | github.com/go-chi/chi/v3 | 0 | No fix |
| Go | github.com/go-chi/chi/v4 | 0 | No fix |
| Go | github.com/go-chi/chi/v5 | 5.2.2 | 5.2.4 |
| go | github.com/go-chi/chi | 5.2.2 | 5.2.4 |
| openSUSE:Leap 16.0 | warewulf4 | 0 | 4.7.0-bp160.1.1 |
| openSUSE:Tumbleweed | trivy | 0 | 0.70.0-1.1 |
| openSUSE:Tumbleweed | warewulf4 | 0 | 4.6.5-2.1 |
Related vulnerabilities
- CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that… Also affects warewulf4
- CVE-2026-33814 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing… Also affects warewulf4
- CVE-2026-53492 containerd is an open-source container runtime. Also affects trivy
- CVE-2026-53489 containerd is an open-source container runtime. Also affects trivy
- CVE-2026-50195 containerd is an open-source container runtime. Also affects trivy
- CVE-2026-47262 containerd is an open-source container runtime. Also affects trivy
- CVE-2026-53488 containerd is an open-source container runtime. Also affects trivy
- CVE-2026-55092 Trivy is a security scanner. Also affects trivy