Skip to content

Commit c1bba61

Browse files
committed
data/reports: review GO-2025-3683
- data/reports/GO-2025-3683.yaml Fixes #3683 Change-Id: I2f0a1b842b8f7fea756b2ec7cf05bbd3ccb4e290 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/681015 Reviewed-by: Damien Neil <[email protected]> LUCI-TryBot-Result: Go LUCI <[email protected]>
1 parent d7ec780 commit c1bba61

File tree

2 files changed

+7
-10
lines changed

2 files changed

+7
-10
lines changed

data/osv/GO-2025-3683.json

Lines changed: 3 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,8 @@
77
"CVE-2025-46721",
88
"GHSA-w9hf-35q4-vcjw"
99
],
10-
"summary": "nosurf vulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf",
11-
"details": "nosurf vulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf",
10+
"summary": "Vulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf",
11+
"details": "Vulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf",
1212
"affected": [
1313
{
1414
"package": {
@@ -47,10 +47,6 @@
4747
"type": "ADVISORY",
4848
"url": "https://github.com/justinas/nosurf/security/advisories/GHSA-w9hf-35q4-vcjw"
4949
},
50-
{
51-
"type": "ADVISORY",
52-
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46721"
53-
},
5450
{
5551
"type": "FIX",
5652
"url": "https://github.com/justinas/nosurf/commit/ec9bb776d8e5ba9e906b6eb70428f4e7b009feee"
@@ -70,6 +66,6 @@
7066
],
7167
"database_specific": {
7268
"url": "https://pkg.go.dev/vuln/GO-2025-3683",
73-
"review_status": "UNREVIEWED"
69+
"review_status": "REVIEWED"
7470
}
7571
}

data/reports/GO-2025-3683.yaml

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,19 +11,20 @@ modules:
1111
- CSRFHandler.ServeHTTP
1212
derived_symbols:
1313
- NewPure
14-
summary: nosurf vulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf
14+
summary: |-
15+
Vulnerable to CSRF due to non-functional same-origin request checks in
16+
github.com/justinas/nosurf
1517
cves:
1618
- CVE-2025-46721
1719
ghsas:
1820
- GHSA-w9hf-35q4-vcjw
1921
references:
2022
- advisory: https://github.com/justinas/nosurf/security/advisories/GHSA-w9hf-35q4-vcjw
21-
- advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-46721
2223
- fix: https://github.com/justinas/nosurf/commit/ec9bb776d8e5ba9e906b6eb70428f4e7b009feee
2324
- web: https://github.com/advisories/GHSA-rq77-p4h8-4crw
2425
- web: https://github.com/justinas/nosurf-cve-2025-46721
2526
- web: https://github.com/justinas/nosurf/releases/tag/v1.2.0
2627
source:
2728
id: GHSA-w9hf-35q4-vcjw
2829
created: 2025-05-15T14:37:40.720845-04:00
29-
review_status: NEEDS_REVIEW
30+
review_status: REVIEWED

0 commit comments

Comments
 (0)