CVE-2025-46721

Medium

Advisory

Published 14 May 2025In the index since 6 Sept 2026

nosurf vulnerable to CSRF due to non-functional same-origin request checks

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
github.com/justinas/nosurfgolang	v1.1.1	1.2.0	2

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 2 container images this version deploys carry CVE-2025-46721.

Container image	Digest	Package	Fixed in
coderenvs/coder-service :1.44.6	1deffc4670e6	github.com/justinas/nosurf@v1.1.1	1.2.0

6,849

1 of the 2 container images this version deploys carry CVE-2025-46721.

Container image	Digest	Package	Fixed in
engrmth/bnkr :2.1.0	6d8464e6f0e8	github.com/justinas/nosurf@v1.1.1	1.2.0

15,253

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
coderenvs/coder-service :1.44.6	1deffc4670e6	github.com/justinas/nosurf@v1.1.1	1.2.0	1
engrmth/bnkr :2.1.0	6d8464e6f0e8	github.com/justinas/nosurf@v1.1.1	1.2.0	1