gofiber fiber

• CVE-2026-119285 Medium 5.9 Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads 0.1%
• CVE-2026-44332 Medium 5.3 Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer 0.5%
• CVE-2026-53624 Medium 4.8 Fiber: HSTS header never set in helmet middleware due to incorrect protocol check 0.2%
• CVE-2026-45045 Medium 5.3 Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForward 0.5%
• CVE-2026-42554 Medium 5.3 Fiber: XSS in AutoFormat Content Negotiation 0.2%
• CVE-2026-30246 Medium 6.5 github.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters 0.3%
• CVE-2026-25899 High 7.5 Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation 0.4%
• CVE-2026-25891 High 7.7 Fiber has an Arbitrary File Read in Static Middleware on Windows 0.7%
• CVE-2026-25882 Medium 5.5 Fiber has a Denial of Service Vulnerability via Route Parameter Overflow 0.7%
• CVE-2025-66630 Critical 9.2 Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure 0.5%
• CVE-2025-54801 High 8.7 Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder 0.4%
• CVE-2025-48075 High 7.7 Fiber panics when fiber.Ctx.BodyParser parses invalid range index 0.5%
• CVE-2024-38513 Critical 10.0 Fiber Session Middleware Token Injection Vulnerability 0.7%
• CVE-2024-25124 Critical 9.4 Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials 0.7%
• CVE-2023-45141 High 8.6 CSRF Token Validation Vulnerability in fiber 0.3%
• CVE-2023-45128 Critical 10.0 CSRF Token Reuse Vulnerability in fiber 0.4%
• CVE-2023-41338 Medium 5.3 Vulnerability in Ctx.IsFromLocal() in gofiber 0.7%
• CVE-2020-15111 Medium 4.2 CRLF vulnerability in Fiber 0.9%