File tree Expand file tree Collapse file tree 2 files changed +7
-10
lines changed Expand file tree Collapse file tree 2 files changed +7
-10
lines changed Original file line number Diff line number Diff line change 7
7
" CVE-2025-46721" ,
8
8
" GHSA-w9hf-35q4-vcjw"
9
9
],
10
- "summary" : " nosurf vulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf" ,
11
- "details" : " nosurf vulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf" ,
10
+ "summary" : " Vulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf" ,
11
+ "details" : " Vulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf" ,
12
12
"affected" : [
13
13
{
14
14
"package" : {
47
47
"type" : " ADVISORY" ,
48
48
"url" : " https://github.com/justinas/nosurf/security/advisories/GHSA-w9hf-35q4-vcjw"
49
49
},
50
- {
51
- "type" : " ADVISORY" ,
52
- "url" : " https://nvd.nist.gov/vuln/detail/CVE-2025-46721"
53
- },
54
50
{
55
51
"type" : " FIX" ,
56
52
"url" : " https://github.com/justinas/nosurf/commit/ec9bb776d8e5ba9e906b6eb70428f4e7b009feee"
70
66
],
71
67
"database_specific" : {
72
68
"url" : " https://pkg.go.dev/vuln/GO-2025-3683" ,
73
- "review_status" : " UNREVIEWED "
69
+ "review_status" : " REVIEWED "
74
70
}
75
71
}
Original file line number Diff line number Diff line change @@ -11,19 +11,20 @@ modules:
11
11
- CSRFHandler.ServeHTTP
12
12
derived_symbols :
13
13
- NewPure
14
- summary : nosurf vulnerable to CSRF due to non-functional same-origin request checks in github.com/justinas/nosurf
14
+ summary : |-
15
+ Vulnerable to CSRF due to non-functional same-origin request checks in
16
+ github.com/justinas/nosurf
15
17
cves :
16
18
- CVE-2025-46721
17
19
ghsas :
18
20
- GHSA-w9hf-35q4-vcjw
19
21
references :
20
22
- advisory : https://github.com/justinas/nosurf/security/advisories/GHSA-w9hf-35q4-vcjw
21
- - advisory : https://nvd.nist.gov/vuln/detail/CVE-2025-46721
22
23
- fix : https://github.com/justinas/nosurf/commit/ec9bb776d8e5ba9e906b6eb70428f4e7b009feee
23
24
- web : https://github.com/advisories/GHSA-rq77-p4h8-4crw
24
25
- web : https://github.com/justinas/nosurf-cve-2025-46721
25
26
- web : https://github.com/justinas/nosurf/releases/tag/v1.2.0
26
27
source :
27
28
id : GHSA-w9hf-35q4-vcjw
28
29
created : 2025-05-15T14:37:40.720845-04:00
29
- review_status : NEEDS_REVIEW
30
+ review_status : REVIEWED
You can’t perform that action at this time.
0 commit comments