Skip to content
Noroxi

gofiber records

19 published records for vendor gofiber.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 23
  3. 24
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

19 records
  • CVE-2024-38513
    39Monitor

    Fiber Session Middleware Token Injection Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    gofiber · fiberJul 1, 2024

  • CVE-2024-25124
    39Monitor

    Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials

    CriticalCVSS 9.8No exploitEPSS 0%

    gofiber · fiberFeb 21, 2024

  • CVE-2025-66565
    37Monitor

    Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

    CriticalCVSS 9.3No exploitEPSS 0%

    gofiber · utilsDec 9, 2025

  • CVE-2025-66630
    36Monitor

    Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure

    CriticalCVSS 9.2No exploitEPSS 0%

    gofiber · fiberFeb 9, 2026

  • CVE-2023-45128
    35Monitor

    CSRF Token Reuse Vulnerability in fiber

    HighCVSS 8.8No exploitEPSS 0%

    gofiber · fiberOct 16, 2023

  • CVE-2023-45141
    35Monitor

    CSRF Token Validation Vulnerability in fiber

    HighCVSS 8.8No exploitEPSS 0%

    gofiber · fiberOct 16, 2023

  • CVE-2025-54801
    34Monitor

    Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder

    HighCVSS 8.7No exploitEPSS 0%

    gofiber · fiberAug 5, 2025

  • CVE-2026-25891
    30Monitor

    Fiber has an Arbitrary File Read in Static Middleware on Windows

    HighCVSS 7.7No exploitEPSS 0%

    gofiber · fiberFeb 24, 2026

  • CVE-2025-48075
    30Monitor

    Fiber panics when fiber.Ctx.BodyParser parses invalid range index

    HighCVSS 7.7No exploitEPSS 0%

    gofiber · fiberMay 22, 2025

  • CVE-2026-25899
    30Monitor

    Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation

    HighCVSS 7.5No exploitEPSS 0%

    gofiber · fiberFeb 24, 2026

  • CVE-2026-30246
    26Monitor

    github.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters

    MediumCVSS 6.5No exploitEPSS 0%

    gofiber · fiberMay 5, 2026

  • CVE-2024-22199
    24Monitor

    Django Template Engine Vulnerable to XSS

    MediumCVSS 6.1No exploitEPSS 0%

    gofiber · djangoJan 11, 2024

  • CVE-2026-25882
    22Monitor

    Fiber has a Denial of Service Vulnerability via Route Parameter Overflow

    MediumCVSS 5.5No exploitEPSS 0%

    gofiber · fiberFeb 24, 2026

  • CVE-2020-15111
    21Monitor

    CRLF vulnerability in Fiber

    MediumCVSS 5.4No exploitEPSS 0%

    gofiber · fiberJul 20, 2020

  • CVE-2023-41338
    21Monitor

    Vulnerability in Ctx.IsFromLocal() in gofiber

    MediumCVSS 5.3No exploitEPSS 0%

    gofiber · fiberSep 8, 2023

  • CVE-2026-44332
    21Monitor

    Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer

    MediumCVSS 5.3No exploitEPSS 0%

    gofiber · fiberJul 8, 2026

  • CVE-2026-45045
    21Monitor

    Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForward

    MediumCVSS 5.3No exploitEPSS 0%

    gofiber · fiberJul 8, 2026

  • CVE-2026-42554
    21Monitor

    Fiber: XSS in AutoFormat Content Negotiation

    MediumCVSS 5.3No exploitEPSS 0%

    gofiber · fiberMay 11, 2026

  • CVE-2026-53624
    19Monitor

    Fiber: HSTS header never set in helmet middleware due to incorrect protocol check

    MediumCVSS 4.8No exploitEPSS 0%

    gofiber · fiberJul 8, 2026