GHSA-mqqf-5wvp-8fh8: chi has an open redirect vulnerability in the RedirectSlashes middleware

January 14, 2026

The RedirectSlashes function in middleware/strip.go does not perform correct input validation and can lead to an open redirect vulnerability.

References

github.com/advisories/GHSA-mqqf-5wvp-8fh8
github.com/go-chi/chi
github.com/go-chi/chi/commit/6eb35881c0e438ffb663ddbad3a61babaa5e5d8a
github.com/go-chi/chi/issues/1037
github.com/go-chi/chi/security/advisories/GHSA-mqqf-5wvp-8fh8

Code Behaviors & Features

Detect and mitigate GHSA-mqqf-5wvp-8fh8 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →