CVE-2026-25890: Gorilla Mux Skipclean Path Bypasscve-2026-25890-gorilla-mux-skipclean-path-bypass
Calling `SkipClean(true)` on a `gorilla/mux` router disables automatic URL path cleaning. This allows unnormalized path payloads (like using multiple consecutive slashes) to bypass path-based access control, routing, or authorization rules that rely on normalized paths. If the underlying filesystem or downstream service subsequently cleans the path, an attac