Threats tagged 'ghsa-r83h-4mhv-9p8m'

go-chi chi versions before 5.5.0 have an authentication bypass vulnerability in the middleware.SupressNotFound component. This flaw allows unauthenticated attackers to exploit the routing mechanism by requesting a mounted path that matches an outer public route suffix, thereby bypassing authentication middleware and potentially accessing tenant-scoped data.