Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-5585
  • Go/github.com/gofiber/fiber/v2
  • Go/github.com/gofiber/fiber/v3
 Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber 24 Jul
  • Fix available
GHSA-gcfq-8gqf-4876
  • Go/github.com/gofiber/fiber/v2
  • Go/github.com/gofiber/fiber/v3
 GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForward 02 Jul
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-qjv7-627w-8qjv
  • Go/github.com/gofiber/fiber/v2
  • Go/github.com/gofiber/fiber/v3
 Fiber vulnerable to XSS in AutoFormat Content Negotiation 05 May
  • Fix available
  • Severity - 5.3 (Medium)
GO-2026-4543
  • Go/github.com/gofiber/fiber/v2
  • Go/github.com/gofiber/fiber/v3
 Fiber has a Denial of Service Vulnerability via Route Parameter Overflow in github.com/gofiber/fiber 26 Feb
  • Fix available
GHSA-mrq8-rjmw-wpq3
  • Go/github.com/gofiber/fiber/v2
  • Go/github.com/gofiber/fiber/v3
 Fiber has a Denial of Service Vulnerability via Route Parameter Overflow 24 Feb
  • Fix available
  • Severity - 6.9 (Medium)
GO-2026-4471
  • Go/github.com/gofiber/fiber
  • Go/github.com/gofiber/fiber/v2
 Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() on crypto/rand failure in github.com/gofiber/fiber 19 Feb
  • Fix available
GHSA-68rr-p4fp-j59v
  • Go/github.com/gofiber/fiber/v2
 Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure 09 Feb
  • Fix available
  • Severity - 9.2 (Critical)
GO-2025-3845
  • Go/github.com/gofiber/fiber/v2
 Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder in github.com/gofiber/fiber 11 Aug 2025
  • Fix available
GHSA-qx2q-88mx-vhg7
  • Go/github.com/gofiber/fiber/v2
 Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder 05 Aug 2025
  • Fix available
  • Severity - 8.7 (High)
GO-2025-3706
  • Go/github.com/gofiber/fiber
  • Go/github.com/gofiber/fiber/v2
 Fiber panics when fiber.Ctx.BodyParser parses invalid range index in github.com/gofiber/fiber 27 May 2025
  • Fix available
GHSA-hg3g-gphw-5hhm
  • Go/github.com/gofiber/fiber/v2
 Fiber panics when fiber.Ctx.BodyParser parses invalid range index 22 May 2025
  • Fix available
  • Severity - 7.7 (High)
GO-2024-2959
  • Go/github.com/gofiber/fiber
  • Go/github.com/gofiber/fiber/v2
 Session Middleware Token Injection Vulnerability in github.com/gofiber/fiber 02 Jul 2024
  • Fix available
GHSA-98j2-3j3p-fw2v
  • Go/github.com/gofiber/fiber
  • Go/github.com/gofiber/fiber/v2
  • Go/github.com/gofiber/fiber/v2/middleware/session
 Session Middleware Token Injection Vulnerability 01 Jul 2024
  • Fix available
  • Severity - 10.0 (Critical)
GO-2024-2574
  • Go/github.com/gofiber/fiber/v2
 Insecure CORS Configuration allowing wildcard origin with credentials in github.com/gofiber/fiber/v2 20 May 2024
  • Fix available
GHSA-fmg4-x8pw-hjhg
  • Go/github.com/gofiber/fiber/v2
 Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials 22 Feb 2024
  • Fix available
  • Severity - 9.4 (Critical)
GO-2023-2116
  • Go/github.com/gofiber/fiber/v2
 CSRF token validation vulnerability in github.com/gofiber/fiber/v2 24 Oct 2023
  • Fix available
Load more...