[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-72816":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":468,"aliases":469,"duplicate_of":9,"upstream":474,"downstream":475,"duplicates":490,"related":491,"reserved_at":9,"published_at":498,"modified_at":499,"state":500,"summary":501,"references_raw":510,"kevs":554,"epss":555,"epss_history":558,"metrics":663,"affected":685},"CVE-2026-72816","go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware (middleware/realip.go). The realIP() function reads client-controlled headers (True-Client-IP, X-Real-IP, and X-Forwarded-For) and overwrites r.RemoteAddr without verifying that the request originated from a trusted proxy. Attackers can supply arbitrary IP addresses in these headers to bypass IP-based access controls, evade rate limiting and geo-IP restrictions, and pollute audit logs. Fixed in 5.3.0.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-290","Authentication Bypass by Spoofing","This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.","weakness","Incomplete","Base",[19,194,198,202,206,282,286,290,429,433],{"id":20,"name":21,"techniques":22},"CAPEC-21","Exploitation of Trusted Identifiers",[23,140,170],{"id":24,"name":25,"tactics":26,"countermeasures":36},"T1134","Access Token Manipulation",[27,30,33],{"id":28,"name":29},"TA0030","Defense Evasion",{"id":31,"name":32},"TA0005","Stealth",{"id":34,"name":35},"TA0111","Privilege Escalation",[37,42,47,51,55,60,65,69,73,78,82,87,91,95,99,103,107,112,116,120,124,128,132,136],{"id":38,"name":39,"tactic":40},"D3-CTS","Credential Transmission Scoping",{"name":41},"Isolate",{"id":43,"name":44,"tactic":45},"D3-CCSA","Credential Compromise Scope Analysis",{"name":46},"Detect",{"id":48,"name":49,"tactic":50},"D3-OPM","Operational Process Monitoring",{"name":46},{"id":52,"name":53,"tactic":54},"D3-PSA","Process Spawn Analysis",{"name":46},{"id":56,"name":57,"tactic":58},"D3-ST","Session Termination",{"name":59},"Evict",{"id":61,"name":62,"tactic":63},"D3-NTPM","Network Traffic Policy Mapping",{"name":64},"Model",{"id":66,"name":67,"tactic":68},"D3-CR","Credential Revocation",{"name":59},{"id":70,"name":71,"tactic":72},"D3-ANCI","Authentication Cache Invalidation",{"name":59},{"id":74,"name":75,"tactic":76},"D3-DUC","Decoy User Credential",{"name":77},"Deceive",{"id":79,"name":80,"tactic":81},"D3-AM","Access Modeling",{"name":64},{"id":83,"name":84,"tactic":85},"D3-CH","Credential Hardening",{"name":86},"Harden",{"id":88,"name":89,"tactic":90},"D3-MFA","Multi-factor Authentication",{"name":86},{"id":92,"name":93,"tactic":94},"D3-CRO","Credential Rotation",{"name":86},{"id":96,"name":97,"tactic":98},"D3-HBPI","Hardware-based Process Isolation",{"name":41},{"id":100,"name":101,"tactic":102},"D3-TB","Token Binding",{"name":86},{"id":104,"name":105,"tactic":106},"D3-TBA","Token-based Authentication",{"name":86},{"id":108,"name":109,"tactic":110},"D3-RC","Restore Configuration",{"name":111},"Restore",{"id":113,"name":114,"tactic":115},"D3-AEM","Application Exception Monitoring",{"name":46},{"id":117,"name":118,"tactic":119},"D3-RIC","Reissue Credential",{"name":111},{"id":121,"name":122,"tactic":123},"D3-CI","Configuration Inventory",{"name":64},{"id":125,"name":126,"tactic":127},"D3-SCA","System Call Analysis",{"name":46},{"id":129,"name":130,"tactic":131},"D3-SCF","System Call Filtering",{"name":41},{"id":133,"name":134,"tactic":135},"D3-EAL","Executable Allowlisting",{"name":41},{"id":137,"name":138,"tactic":139},"D3-EDL","Executable Denylisting",{"name":41},{"id":141,"name":142,"tactics":143,"countermeasures":147},"T1528","Steal Application Access Token",[144],{"id":145,"name":146},"TA0031","Credential Access",[148,150,152,154,156,158,160,162,164,166,168],{"id":83,"name":84,"tactic":149},{"name":86},{"id":117,"name":118,"tactic":151},{"name":111},{"id":70,"name":71,"tactic":153},{"name":59},{"id":100,"name":101,"tactic":155},{"name":86},{"id":38,"name":39,"tactic":157},{"name":41},{"id":88,"name":89,"tactic":159},{"name":86},{"id":66,"name":67,"tactic":161},{"name":59},{"id":104,"name":105,"tactic":163},{"name":86},{"id":43,"name":44,"tactic":165},{"name":46},{"id":92,"name":93,"tactic":167},{"name":86},{"id":74,"name":75,"tactic":169},{"name":77},{"id":171,"name":172,"tactics":173,"countermeasures":175},"T1539","Steal Web Session Cookie",[174],{"id":145,"name":146},[176,178,180,182,184,186,188,190,192],{"id":38,"name":39,"tactic":177},{"name":41},{"id":74,"name":75,"tactic":179},{"name":77},{"id":83,"name":84,"tactic":181},{"name":86},{"id":88,"name":89,"tactic":183},{"name":86},{"id":70,"name":71,"tactic":185},{"name":59},{"id":43,"name":44,"tactic":187},{"name":46},{"id":92,"name":93,"tactic":189},{"name":86},{"id":66,"name":67,"tactic":191},{"name":59},{"id":117,"name":118,"tactic":193},{"name":111},{"id":195,"name":196,"techniques":197},"CAPEC-22","Exploiting Trust in Client",[],{"id":199,"name":200,"techniques":201},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":203,"name":204,"techniques":205},"CAPEC-461","Web Services API Signature Forgery Leveraging Hash Function Extension Weakness",[],{"id":207,"name":208,"techniques":209},"CAPEC-473","Signature Spoof",[210,273],{"id":211,"name":212,"tactics":213,"countermeasures":216},"T1036.001","Invalid Code Signature",[214,215],{"id":28,"name":29},{"id":31,"name":32},[217,221,225,229,233,237,241,245,249,253,257,261,265,269,271],{"id":218,"name":219,"tactic":220},"D3-FA","File Analysis",{"name":46},{"id":222,"name":223,"tactic":224},"D3-FE","File Encryption",{"name":86},{"id":226,"name":227,"tactic":228},"D3-FIM","File Integrity Monitoring",{"name":46},{"id":230,"name":231,"tactic":232},"D3-DA","Dynamic Analysis",{"name":46},{"id":234,"name":235,"tactic":236},"D3-EFA","Emulated File Analysis",{"name":46},{"id":238,"name":239,"tactic":240},"D3-DF","Decoy File",{"name":77},{"id":242,"name":243,"tactic":244},"D3-FEV","File Eviction",{"name":59},{"id":246,"name":247,"tactic":248},"D3-RF","Restore File",{"name":111},{"id":250,"name":251,"tactic":252},"D3-CF","Content Filtering",{"name":41},{"id":254,"name":255,"tactic":256},"D3-LFP","Local File Permissions",{"name":41},{"id":258,"name":259,"tactic":260},"D3-RFAM","Remote File Access Mediation",{"name":41},{"id":262,"name":263,"tactic":264},"D3-CQ","Content Quarantine",{"name":41},{"id":266,"name":267,"tactic":268},"D3-CM","Content Modification",{"name":41},{"id":133,"name":134,"tactic":270},{"name":41},{"id":137,"name":138,"tactic":272},{"name":41},{"id":274,"name":275,"tactics":276,"countermeasures":281},"T1553.002","Code Signing",[277,278],{"id":28,"name":29},{"id":279,"name":280},"TA0112","Defense Impairment",[],{"id":283,"name":284,"techniques":285},"CAPEC-476","Signature Spoofing by Misrepresentation",[],{"id":287,"name":288,"techniques":289},"CAPEC-59","Session Credential Falsification through Prediction",[],{"id":291,"name":292,"techniques":293},"CAPEC-60","Reusing Session IDs (aka Session Replay)",[294,324],{"id":295,"name":296,"tactics":297,"countermeasures":301},"T1134.001","Token Impersonation/Theft",[298,299,300],{"id":28,"name":29},{"id":31,"name":32},{"id":34,"name":35},[302,304,306,308,310,312,314,316,318,320,322],{"id":66,"name":67,"tactic":303},{"name":59},{"id":43,"name":44,"tactic":305},{"name":46},{"id":38,"name":39,"tactic":307},{"name":41},{"id":70,"name":71,"tactic":309},{"name":59},{"id":100,"name":101,"tactic":311},{"name":86},{"id":104,"name":105,"tactic":313},{"name":86},{"id":74,"name":75,"tactic":315},{"name":77},{"id":83,"name":84,"tactic":317},{"name":86},{"id":92,"name":93,"tactic":319},{"name":86},{"id":88,"name":89,"tactic":321},{"name":86},{"id":117,"name":118,"tactic":323},{"name":111},{"id":325,"name":326,"tactics":327,"countermeasures":332},"T1550.004","Web Session Cookie",[328,329],{"id":28,"name":29},{"id":330,"name":331},"TA0109","Lateral Movement",[333,335,337,339,341,345,349,353,357,359,361,365,369,373,377,379,383,385,389,391,395,399,401,403,407,411,415,417,421,425],{"id":92,"name":93,"tactic":334},{"name":86},{"id":129,"name":130,"tactic":336},{"name":41},{"id":117,"name":118,"tactic":338},{"name":111},{"id":38,"name":39,"tactic":340},{"name":41},{"id":342,"name":343,"tactic":344},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":46},{"id":346,"name":347,"tactic":348},"D3-APCA","Application Protocol Command Analysis",{"name":46},{"id":350,"name":351,"tactic":352},"D3-PSMD","Process Self-Modification Detection",{"name":46},{"id":354,"name":355,"tactic":356},"D3-RTSD","Remote Terminal Session Detection",{"name":46},{"id":52,"name":53,"tactic":358},{"name":46},{"id":96,"name":97,"tactic":360},{"name":41},{"id":362,"name":363,"tactic":364},"D3-KBPI","Kernel-based Process Isolation",{"name":41},{"id":366,"name":367,"tactic":368},"D3-ABPI","Application-based Process Isolation",{"name":41},{"id":370,"name":371,"tactic":372},"D3-HS","Host Shutdown",{"name":59},{"id":374,"name":375,"tactic":376},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":46},{"id":66,"name":67,"tactic":378},{"name":59},{"id":380,"name":381,"tactic":382},"D3-HR","Host Reboot",{"name":59},{"id":43,"name":44,"tactic":384},{"name":46},{"id":386,"name":387,"tactic":388},"D3-NTF","Network Traffic Filtering",{"name":41},{"id":74,"name":75,"tactic":390},{"name":77},{"id":392,"name":393,"tactic":394},"D3-CSPP","Client-server Payload Profiling",{"name":46},{"id":396,"name":397,"tactic":398},"D3-PT","Process Termination",{"name":59},{"id":83,"name":84,"tactic":400},{"name":86},{"id":88,"name":89,"tactic":402},{"name":86},{"id":404,"name":405,"tactic":406},"D3-PLA","Process Lineage Analysis",{"name":46},{"id":408,"name":409,"tactic":410},"D3-NTCD","Network Traffic Community Deviation",{"name":46},{"id":412,"name":413,"tactic":414},"D3-PS","Process Suspension",{"name":59},{"id":70,"name":71,"tactic":416},{"name":59},{"id":418,"name":419,"tactic":420},"D3-NTSA","Network Traffic Signature Analysis",{"name":46},{"id":422,"name":423,"tactic":424},"D3-WSAM","Web Session Access Mediation",{"name":41},{"id":426,"name":427,"tactic":428},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":46},{"id":430,"name":431,"techniques":432},"CAPEC-667","Bluetooth Impersonation AttackS (BIAS)",[],{"id":434,"name":435,"techniques":436},"CAPEC-94","Adversary in the Middle (AiTM)",[437],{"id":438,"name":439,"tactics":440,"countermeasures":445},"T1557","Adversary-in-the-Middle",[441,442],{"id":145,"name":146},{"id":443,"name":444},"TA0100","Collection",[446,448,450,452,454,456,458,462,464,466],{"id":346,"name":347,"tactic":447},{"name":46},{"id":392,"name":393,"tactic":449},{"name":46},{"id":342,"name":343,"tactic":451},{"name":46},{"id":418,"name":419,"tactic":453},{"name":46},{"id":408,"name":409,"tactic":455},{"name":46},{"id":354,"name":355,"tactic":457},{"name":46},{"id":459,"name":460,"tactic":461},"D3-CAA","Connection Attempt Analysis",{"name":46},{"id":426,"name":427,"tactic":463},{"name":46},{"id":374,"name":375,"tactic":465},{"name":46},{"id":386,"name":387,"tactic":467},{"name":41},[],[470,471,472,473],"DEBIAN-CVE-2026-72816","GHSA-rjr7-jggh-pgcp","GO-2026-5777","UBUNTU-CVE-2026-72816",[],[476,478,480,482,484,486,488],{"_key":477},"OPENSUSE-SU-2026:21653-1",{"_key":479},"OPENSUSE-SU-2026:21645-1",{"_key":481},"OPENSUSE-SU-2026:21670-1",{"_key":483},"RHSA-2026:49718",{"_key":485},"RHSA-2026:49732",{"_key":487},"RHSA-2026:54420",{"_key":489},"OPENSUSE-SU-2026:21793-1",[],[492,493,494,495,496],{"_key":477},{"_key":479},{"_key":481},{"_key":489},{"_key":497},"CGA-3X7G-JP4Q-H9FR","2026-08-14T11:35:28.145Z","2026-08-14T15:22:35.592Z","Deferred",{"cisa_kev":502,"cisa_ransomware":502,"cisa_vendor":9,"epss_severity":503,"epss_score":504,"severity":505,"severity_score":506,"severity_version":507,"severity_source":508,"severity_vector":509,"severity_status":500},false,"low",0.00219,"medium",6.9,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",[511,522,527,532,537,541,546,550],{"url":512,"sources":513,"tags":517},"https://github.com/go-chi/chi/security/advisories/GHSA-rjr7-jggh-pgcp",[508,514,515,516],"nvd","osv_go","osv_ubuntu",[518,519,520,521],"Vendor Advisory","WEB","Advisory","REPORT",{"url":523,"sources":524,"tags":525},"https://www.vulncheck.com/advisories/go-chi-chi-before-ip-spoofing-via-realip-middleware",[508,514,516],[526,521],"Third Party Advisory",{"url":528,"sources":529,"tags":531},"https://security-tracker.debian.org/tracker/CVE-2026-72816",[530],"osv_debian",[520],{"url":533,"sources":534,"tags":535},"https://github.com/go-chi/chi",[515],[536],"PACKAGE",{"url":538,"sources":539,"tags":540},"https://github.com/go-chi/chi/releases/tag/v5.3.0",[515],[519],{"url":542,"sources":543,"tags":544},"https://github.com/go-chi/chi/pull/967",[515],[545],"FIX",{"url":547,"sources":548,"tags":549},"https://ubuntu.com/security/CVE-2026-72816",[516],[521],{"url":551,"sources":552,"tags":553},"https://www.cve.org/CVERecord?id=CVE-2026-72816",[516],[521],[],{"date":556,"score":504,"percentile":557},"2026-09-19",0.12664,[559,562,565,568,571,574,576,579,582,585,588,591,594,597,600,603,606,609,612,615,618,621,624,627,630,633,636,639,642,645,648,651,654,657,660,662],{"date":560,"score":504,"percentile":561},"2026-08-15",0.12639,{"date":563,"score":504,"percentile":564},"2026-08-16",0.12685,{"date":566,"score":504,"percentile":567},"2026-08-17",0.12619,{"date":569,"score":504,"percentile":570},"2026-08-18",0.12617,{"date":572,"score":504,"percentile":573},"2026-08-19",0.12661,{"date":575,"score":504,"percentile":573},"2026-08-20",{"date":577,"score":504,"percentile":578},"2026-08-21",0.12669,{"date":580,"score":504,"percentile":581},"2026-08-22",0.12667,{"date":583,"score":504,"percentile":584},"2026-08-23",0.12654,{"date":586,"score":504,"percentile":587},"2026-08-24",0.12173,{"date":589,"score":504,"percentile":590},"2026-08-25",0.12168,{"date":592,"score":504,"percentile":593},"2026-08-26",0.12203,{"date":595,"score":504,"percentile":596},"2026-08-27",0.12198,{"date":598,"score":504,"percentile":599},"2026-08-28",0.12217,{"date":601,"score":504,"percentile":602},"2026-08-29",0.12223,{"date":604,"score":504,"percentile":605},"2026-08-30",0.1224,{"date":607,"score":504,"percentile":608},"2026-08-31",0.12239,{"date":610,"score":504,"percentile":611},"2026-09-01",0.12249,{"date":613,"score":504,"percentile":614},"2026-09-02",0.12254,{"date":616,"score":504,"percentile":617},"2026-09-03",0.12245,{"date":619,"score":504,"percentile":620},"2026-09-04",0.12258,{"date":622,"score":504,"percentile":623},"2026-09-05",0.12288,{"date":625,"score":504,"percentile":626},"2026-09-06",0.12303,{"date":628,"score":504,"percentile":629},"2026-09-07",0.12298,{"date":631,"score":504,"percentile":632},"2026-09-08",0.12285,{"date":634,"score":504,"percentile":635},"2026-09-09",0.12338,{"date":637,"score":504,"percentile":638},"2026-09-10",0.12334,{"date":640,"score":504,"percentile":641},"2026-09-11",0.1233,{"date":643,"score":504,"percentile":644},"2026-09-12",0.12447,{"date":646,"score":504,"percentile":647},"2026-09-13",0.12402,{"date":649,"score":504,"percentile":650},"2026-09-14",0.12418,{"date":652,"score":504,"percentile":653},"2026-09-15",0.12476,{"date":655,"score":504,"percentile":656},"2026-09-16",0.1252,{"date":658,"score":504,"percentile":659},"2026-09-17",0.12559,{"date":661,"score":504,"percentile":564},"2026-09-18",{"date":556,"score":504,"percentile":557},[664,672,676,678,682],{"source":508,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":665,"cvss_v4_0":671},{"baseScore":666,"baseSeverity":667,"vectorString":668,"impactScore":669,"exploitabilityScore":670},6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",4.2,10,{"baseScore":506,"baseSeverity":667,"vectorString":509,"impactScore":9,"exploitabilityScore":9},{"source":514,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":673,"cvss_v4_0":674},{"baseScore":666,"baseSeverity":667,"vectorString":668,"impactScore":669,"exploitabilityScore":670},{"baseScore":506,"baseSeverity":667,"vectorString":675,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":530,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":677},{"baseScore":506,"baseSeverity":9,"vectorString":675,"impactScore":9,"exploitabilityScore":9},{"source":515,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":679},{"baseScore":680,"baseSeverity":9,"vectorString":681,"impactScore":9,"exploitabilityScore":9},8.7,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P",{"source":516,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":683,"cvss_v4_0":684},{"baseScore":666,"baseSeverity":9,"vectorString":668,"impactScore":669,"exploitabilityScore":670},{"baseScore":506,"baseSeverity":9,"vectorString":509,"impactScore":9,"exploitabilityScore":9},[686,702,709,717,729,735,742,749,756],{"ecosystem":687,"name":688,"vendor":689,"product":688,"cpe_part":9,"purl_type":690,"purl_namespace":689,"purl_name":688,"source":9,"versions":691},"Debian","golang-github-go-chi-chi","debian","deb",[692,696,697,698],{"version":693,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"version":693,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":693,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":699,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":700,"version_end_type":701,"fixed_in":9},"lt5_3_0_1","5.3.0-1","excluding",{"ecosystem":703,"name":688,"vendor":704,"product":688,"cpe_part":9,"purl_type":690,"purl_namespace":704,"purl_name":688,"source":9,"versions":705},"Ubuntu","ubuntu",[706,707,708],{"version":693,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":693,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":693,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":710,"vendor":711,"product":710,"cpe_part":712,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":713},"chi","go-chi","a",[714],{"version":715,"is_range":694,"range_type":508,"version_start":9,"version_start_type":9,"version_end":716,"version_end_type":701,"fixed_in":9},"\u003C 5.3.0","5.3.0",{"ecosystem":718,"name":719,"vendor":720,"product":721,"cpe_part":9,"purl_type":722,"purl_namespace":720,"purl_name":721,"source":9,"versions":723},"Go","github.com/go-chi/chi/middleware","github.com/go-chi/chi","middleware","golang",[724],{"version":725,"is_range":694,"range_type":726,"version_start":9,"version_start_type":9,"version_end":727,"version_end_type":728,"fixed_in":9},"lte1_5_5","semver","1.5.5","including",{"ecosystem":718,"name":730,"vendor":720,"product":731,"cpe_part":9,"purl_type":722,"purl_namespace":720,"purl_name":731,"source":9,"versions":732},"github.com/go-chi/chi/v5","v5",[733],{"version":734,"is_range":694,"range_type":726,"version_start":9,"version_start_type":9,"version_end":716,"version_end_type":701,"fixed_in":9},"lt5_3_0",{"ecosystem":718,"name":736,"vendor":737,"product":721,"cpe_part":9,"purl_type":722,"purl_namespace":737,"purl_name":721,"source":9,"versions":738},"github.com/go-chi/chi/v2/middleware","github.com/go-chi/chi/v2",[739],{"version":740,"is_range":694,"range_type":726,"version_start":9,"version_start_type":9,"version_end":741,"version_end_type":728,"fixed_in":9},"lte2_1_1","2.1.1",{"ecosystem":718,"name":743,"vendor":744,"product":721,"cpe_part":9,"purl_type":722,"purl_namespace":744,"purl_name":721,"source":9,"versions":745},"github.com/go-chi/chi/v3/middleware","github.com/go-chi/chi/v3",[746],{"version":747,"is_range":694,"range_type":726,"version_start":9,"version_start_type":9,"version_end":748,"version_end_type":728,"fixed_in":9},"lte3_3_5","3.3.5",{"ecosystem":718,"name":750,"vendor":751,"product":721,"cpe_part":9,"purl_type":722,"purl_namespace":751,"purl_name":721,"source":9,"versions":752},"github.com/go-chi/chi/v4/middleware","github.com/go-chi/chi/v4",[753],{"version":754,"is_range":694,"range_type":726,"version_start":9,"version_start_type":9,"version_end":755,"version_end_type":728,"fixed_in":9},"lte4_1_3","4.1.3",{"ecosystem":718,"name":757,"vendor":730,"product":721,"cpe_part":9,"purl_type":722,"purl_namespace":730,"purl_name":721,"source":9,"versions":758},"github.com/go-chi/chi/v5/middleware",[759],{"version":734,"is_range":694,"range_type":726,"version_start":9,"version_start_type":9,"version_end":716,"version_end_type":701,"fixed_in":9}]