github.com/gofiber/fiber
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Fiber panics when fiber.Ctx.BodyParser parses invalid range index | github.com/gofiber/fiber/v2github.com/gofiber/fiber | Go | High | Fix reported | |
| Session Middleware Token Injection Vulnerability | github.com/gofiber/fiber/v2/middleware/sessiongithub.com/gofiber/fiber/v2 | Go | Critical | Fix reported | |
| Fiber unauthorized access vulnerability in `ctx.IsFromLocal()` | github.com/gofiber/fiber/v2github.com/gofiber/fiber | Go | Medium | Fix reported | |
| Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure | github.com/gofiber/fiber/v2github.com/gofiber/fiber | Go | Critical | Fix reported | |
| GoFiber never set HSTS header in helmet middleware due to incorrect protocol check | github.com/gofiber/fiber/v3github.com/gofiber/fiber | Go | Medium | Fix reported | |
| CRLF vulnerability in Fiber | github.com/gofiber/fiber | Go | Medium | Fix reported |