chi v5.2.2 security fix

{
  "id": "c04257760e6f7ed44a47b72e7618c7dbb25fb41352081160bb8e151db97540d9",
  "url": "https://github.com/go-chi/chi/releases/tag/v5.2.2",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "chi v5.2.2 security fix",
    "summary": "chi v5.2.2 fixes a host-header injection issue that could cause an open redirect in RedirectSlashes. The announcement describes it as lower severity and says exploitation requires manipulating a Host header.",
    "evidence": "Security fix Fixes GHSA-vrw8-fxc6-2r93 - \"Host Header Injection Leads to Open Redirect in RedirectSlashes\" commit a lower-severity Open Redirect that can't be exploited in browser or email client, as it requires manipulation of a Host header",
    "products": [
      {
        "name": {
          "value": "chi",
          "evidence": "Release notes from chi"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v5.2.2",
            "evidence": "v5.2.2"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-go-chi-chi",
  "document_id": 21191,
  "published_at": "2025-06-20T13:32:58+00:00"
}