Threats tagged 'cleanstart-2026-ca23047'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-114437Gitea: Medium4.82026-11-11GCVE DatabaseCVE-2026-114437 CVE-2026-114437 affects multiple packages. In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http. See references for individual vulnerability details. Report on CVE-2026-114437 Vulnerability #cleanstart-2026-ca23047 #cleanstart	GCVE Database	2026-11-11

Page 1 of 1