Latest vulnerabilities for vendor "gofiber"

Where

Sort:

Software

gofiber fiber go

gofiber fiber

gofiber django go

gofiber utils go

go/github.com/gofiber/fiberFiber: HSTS header never set in helmet middleware due to incorrect protocol check

Risk 32

Severity

4.8

First published (updated )

CVE-2026-53624

gofiber Fiber GoFiber: X-Real-IP Spoofing via Header.Add() in BalancerForward

Risk 27

Severity

5.3

First published (updated )

CVE-2026-45045

go/github.com/gofiber/fiber/v3Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer

Risk 27

Severity

5.3

First published (updated )

CVE-2026-44332

gofiber Fiber GoFiber: XSS in AutoFormat Content Negotiation

Risk 38

Severity

5.3

First published (updated )

CVE-2026-42554

go/github.com/gofiber/fiber/v3github.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters

Risk 40

Severity

6.5

First published (updated )

CVE-2026-30246

gofiber Fiber GoFiber has a Denial of Service Vulnerability via Route Parameter Overflow

Risk 31

Severity

7.5

EPSS

0.04%

First published (updated )

CVE-2026-25882

go/github.com/gofiber/fiber/v3Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation

Risk 31

Severity

7.5

EPSS

0.10%

First published (updated )

CVE-2026-25899

go/github.com/gofiber/fiber/v3Fiber has an Arbitrary File Read in Static Middleware on Windows

Risk 31

Severity

7.7

EPSS

0.02%

First published (updated )

CVE-2026-25891

go/github.com/gofiber/fiber/v2Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure

Risk 76

Severity

9.4

First published (updated )

CVE-2025-66630

gofiber Utils GoFiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

Risk 86

Severity

9.8

First published (updated )

CVE-2025-66565

go/github.com/gofiber/fiber/v2Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder

Risk 47

Severity

8.7

First published (updated )

CVE-2025-54801

Fiber FiberFiber panics when fiber.Ctx.BodyParser parses invalid range index

Risk 31

Severity

7.7

EPSS

0.05%

First published (updated )

CVE-2025-48075

go/github.com/gofiber/fiber/v2/middleware/sessionFiber Session Middleware Token Injection Vulnerability

Risk 90

Severity

First published (updated )

CVE-2024-38513

go/github.com/gofiber/fiber/v2Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials

Risk 62

Severity

9.8

EPSS

0.04%

First published (updated )

CVE-2024-25124

go/github.com/gofiber/template/django/v3Django Template Engine Vulnerable to XSS

Risk 44

Severity

9.3

EPSS

0.06%

First published (updated )

CVE-2024-22199

gofiber Fiber GoCSRF Token Validation Vulnerability in fiber

Risk 80

Severity

8.8

First published (updated )

CVE-2023-45141

gofiber Fiber GoCSRF Token Reuse Vulnerability in fiber

Risk 84

Severity

First published (updated )

CVE-2023-45128

go/github.com/gofiber/fiber/v2Vulnerability in Ctx.IsFromLocal() in gofiber

Risk 27

Severity

5.3

First published (updated )

CVE-2023-41338

gofiber FiberCRLF vulnerability in Fiber

Risk 35

Severity

5.8

First published (updated )

CVE-2020-15111

Trending

Vendor Risk Score

Software

go/github.com/gofiber/fiberFiber: HSTS header never set in helmet middleware due to incorrect protocol check

gofiber Fiber GoFiber: X-Real-IP Spoofing via Header.Add() in BalancerForward

go/github.com/gofiber/fiber/v3Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer

gofiber Fiber GoFiber: XSS in AutoFormat Content Negotiation

go/github.com/gofiber/fiber/v3github.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters

Don't miss critical vulnerabilities

gofiber Fiber GoFiber has a Denial of Service Vulnerability via Route Parameter Overflow

go/github.com/gofiber/fiber/v3Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation

go/github.com/gofiber/fiber/v3Fiber has an Arbitrary File Read in Static Middleware on Windows

go/github.com/gofiber/fiber/v2Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure

gofiber Utils GoFiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

Don't miss critical vulnerabilities

go/github.com/gofiber/fiber/v2Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder

Fiber FiberFiber panics when fiber.Ctx.BodyParser parses invalid range index

go/github.com/gofiber/fiber/v2/middleware/sessionFiber Session Middleware Token Injection Vulnerability

go/github.com/gofiber/fiber/v2Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials

go/github.com/gofiber/template/django/v3Django Template Engine Vulnerable to XSS

Don't miss critical vulnerabilities

gofiber Fiber GoCSRF Token Validation Vulnerability in fiber

gofiber Fiber GoCSRF Token Reuse Vulnerability in fiber

go/github.com/gofiber/fiber/v2Vulnerability in Ctx.IsFromLocal() in gofiber

gofiber FiberCRLF vulnerability in Fiber

Company

Resources

Contact