github.com/gofiber/fiber/v3 vulnerabilities (Go)
8 vulnerabilities.
-
github.com/gofiber/fiber/v3Go Fiber: HSTS header never set in helmet middleware due to incorrect protocol check 4.8 Medium -
github.com/gofiber/fiber/v3Go Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForward 5.3 Medium -
github.com/gofiber/fiber/v3Go Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer 5.3 Medium -
github.com/gofiber/fiber/v3Go Fiber: XSS in AutoFormat Content Negotiation 5.3 Medium -
github.com/gofiber/fiber/v3Go github.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters 6.5 Medium -
github.com/gofiber/fiber/v3Go Fiber has a Denial of Service Vulnerability via Route Parameter Overflow 5.5 Medium -
github.com/gofiber/fiber/v3Go Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation 7.5 High -
github.com/gofiber/fiber/v3Go Fiber has an Arbitrary File Read in Static Middleware on Windows 7.7 High