github.com/gofiber/fiber/v2 vulnerabilities (Go)
13 vulnerabilities.
-
github.com/gofiber/fiber/v2Go Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads 5.9 Medium -
github.com/gofiber/fiber/v2Go Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForward 5.3 Medium -
github.com/gofiber/fiber/v2Go Fiber: XSS in AutoFormat Content Negotiation 5.3 Medium -
github.com/gofiber/fiber/v2Go Fiber has a Denial of Service Vulnerability via Route Parameter Overflow 5.5 Medium -
github.com/gofiber/fiber/v2Go Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure 9.2 Critical -
github.com/gofiber/fiber/v2Go Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder 8.7 High -
github.com/gofiber/fiber/v2Go Fiber panics when fiber.Ctx.BodyParser parses invalid range index 7.7 High -
github.com/gofiber/fiber/v2Go Fiber Session Middleware Token Injection Vulnerability 10.0 Critical -
github.com/gofiber/fiber/v2Go Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials 9.4 Critical -
github.com/gofiber/fiber/v2Go CSRF Token Validation Vulnerability in fiber 8.6 High -
github.com/gofiber/fiber/v2Go CSRF Token Reuse Vulnerability in fiber 10.0 Critical -
github.com/gofiber/fiber/v2Go Vulnerability in Ctx.IsFromLocal() in gofiber 5.3 Medium -
github.com/gofiber/fiber/v2Go github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error 5.9 Medium