CVE-2025-69725: chi has an open redirect vulnerability in the RedirectSlashes middleware

January 14, 2026 (updated June 18, 2026)

The RedirectSlashes function in middleware/strip.go does not perform correct input validation and can lead to an open redirect vulnerability.

References

github.com/advisories/GHSA-mqqf-5wvp-8fh8
github.com/go-chi/chi/commit/6eb35881c0e438ffb663ddbad3a61babaa5e5d8a
github.com/go-chi/chi/issues/1037
github.com/go-chi/chi/security/advisories/GHSA-mqqf-5wvp-8fh8
nvd.nist.gov/vuln/detail/CVE-2025-69725

Code Behaviors & Features

Detect and mitigate CVE-2025-69725 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →