{"id":"GO-2025-4086","revision":"3535cf61ae8d42339d332e1d66f6e2dd","records":[{"revision":"3535cf61ae8d42339d332e1d66f6e2dd","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4086","aliases":["CVE-2025-64716","GHSA-cf57-c578-7jvv"],"title":"Anubis vulnerable to possible XSS via redir parameter when using subrequest auth mode in github.com/TecharoHQ/anubis","description":"Anubis vulnerable to possible XSS via redir parameter when using subrequest auth mode in github.com/TecharoHQ/anubis","state":0,"publishedAt":"2025-11-05T18:41:15+00:00","modifiedAt":"2026-03-03T04:57:32.708289+00:00","affected":[{"ecosystem":"Go","name":"github.com/TecharoHQ/anubis","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.23.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/TecharoHQ/anubis/security/advisories/GHSA-cf57-c578-7jvv","https://github.com/TecharoHQ/anubis/commit/7ed1753fcced351c81961bf520a7bfb2caac6e88"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4086","license":"OSV · upstream source license applies","key":"osv:GO-2025-4086","identifiers":["GO-2025-4086","CVE-2025-64716","GHSA-cf57-c578-7jvv"]},"retained":false,"historicalAffected":[]}],"coverage":[]}