CVE-2026-42083: Gin Route Group Missing Auth Middleware

A Gin router group was created but no middleware was attached to it either during creation or via `$GROUP.Use(...)` before routes were applied. This can lead to missing authentication, authorization, or other critical middleware checks on the grouped endpoints. Ensure that authorization middleware is applied either by passing it as additional arguments to `.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2026-42083-gin-route-group-missing-auth-middleware --engine opengrep

Description

A Gin router group was created but no middleware was attached to it either during creation or via `$GROUP.Use(...)` before routes were applied. This can lead to missing authentication, authorization, or other critical middleware checks on the grouped endpoints. Ensure that authorization middleware is applied either by passing it as additional arguments to `.