Security
فارسی
All products

github.com/gofiber/fiber/v3

Go · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForwardCVE-2026-45045 · GHSA-GCFQ-8GQF-4876Version ranges need review. github.com/gofiber/fiber/v2github.com/gofiber/fiber/v3 Go Medium Fix reported
Fiber vulnerable to XSS in AutoFormat Content NegotiationCVE-2026-42554 · GHSA-QJV7-627W-8QJVVersion ranges need review. github.com/gofiber/fiber/v2github.com/gofiber/fiber/v3 Go Medium Fix reported
Fiber has a Denial of Service Vulnerability via Route Parameter OverflowCVE-2026-25882 · GHSA-MRQ8-RJMW-WPQ3Version ranges need review. github.com/gofiber/fiber/v2github.com/gofiber/fiber/v3 Go Medium Fix reported
GoFiber Vulnerable to Username Enumeration via Timing Oracle in BasicAuth Default AuthorizerCVE-2026-44332 · GHSA-G5VH-55HW-RXM8Version ranges need review. github.com/gofiber/fiber/v3 Go Medium Fix reported
GoFiber never set HSTS header in helmet middleware due to incorrect protocol checkCVE-2026-53624 · GHSA-GV83-GQW6-9J2C github.com/gofiber/fiber/v3github.com/gofiber/fiber Go Medium Fix reported
Fiber's cache middleware default key generator ignores query string, causing response mix-up across distinct query parametersCVE-2026-30246 · GHSA-35HP-HQMV-8QG8Version ranges need review. github.com/gofiber/fiber/v3 Go Medium Fix reported
Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded AllocationCVE-2026-25899 · GHSA-2MR3-M5Q5-WGP6Version ranges need review. github.com/gofiber/fiber/v3 Go High Fix reported
Fiber has an Arbitrary File Read in Static Middleware on WindowsCVE-2026-25891 · GHSA-M3C2-496V-CW3VVersion ranges need review. github.com/gofiber/fiber/v3 Go High Fix reported