Gofiber Fiber vulnerabilities

• gofiber fiber Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads CVE-2026-119285 Fix available 5.9 MediumOctober 29, 2026
• gofiber fiber Fiber: HSTS header never set in helmet middleware due to incorrect protocol check CVE-2026-53624 Fix available 4.8 MediumJuly 6, 2026
• gofiber fiber Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForward CVE-2026-45045 Fix available 5.3 MediumJuly 2, 2026
• gofiber fiber Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer CVE-2026-44332 Fix available 5.3 MediumJuly 2, 2026
• gofiber fiber Fiber: XSS in AutoFormat Content Negotiation CVE-2026-42554 Fix available 5.3 MediumMay 5, 2026
• gofiber fiber github.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters CVE-2026-30246 Fix available 6.5 MediumApril 28, 2026
• gofiber fiber Fiber has a Denial of Service Vulnerability via Route Parameter Overflow CVE-2026-25882 Fix available 5.5 MediumFebruary 24, 2026
• gofiber fiber Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation CVE-2026-25899 Fix available 7.5 HighFebruary 24, 2026
• gofiber fiber Fiber has an Arbitrary File Read in Static Middleware on Windows CVE-2026-25891 Fix available 7.7 HighFebruary 24, 2026
• gofiber fiber Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure CVE-2025-66630 Fix available 9.2 CriticalFebruary 9, 2026
• gofiber fiber Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder CVE-2025-54801 Fix available 8.7 HighAugust 5, 2025
• gofiber fiber Fiber panics when fiber.Ctx.BodyParser parses invalid range index CVE-2025-48075 Fix available 7.7 HighMay 22, 2025
• gofiber fiber Fiber Session Middleware Token Injection Vulnerability CVE-2024-38513 Fix available 10.0 CriticalJuly 1, 2024
• gofiber fiber Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials CVE-2024-25124 Fix available 9.4 CriticalFebruary 21, 2024
• gofiber fiber CSRF Token Validation Vulnerability in fiber CVE-2023-45141 Fix available 8.6 HighOctober 16, 2023
• gofiber fiber CSRF Token Reuse Vulnerability in fiber CVE-2023-45128 Fix available 10.0 CriticalOctober 16, 2023
• gofiber fiber Vulnerability in Ctx.IsFromLocal() in gofiber CVE-2023-41338 Fix available 5.3 MediumSeptember 8, 2023
• gofiber fiber CRLF vulnerability in Fiber CVE-2020-15111 Fix available 4.2 MediumJuly 20, 2020