gofiber kayıtları
gofiber üreticisine ait 19 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation2
- CWE-789 Memory Allocation with Excessive Size Value2
- CWE-129 Improper Validation of Array Index2
- CWE-252 Unchecked Return Value1
- CWE-290 Authentication Bypass by Spoofing1
- CWE-319 Cleartext Transmission of Sensitive Information1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
19 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-38513İstismar yok | Fiber Session Middleware Token Injection Vulnerabilitygofiber · fiber · CWE-384 | Kritik9,8 | — | %0,7 | 1 Tem 2024 |
39İzleyin | CVE-2024-25124İstismar yok | Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentialsgofiber · fiber · CWE-346 | Kritik9,8 | — | %0,7 | 21 Şub 2024 |
37İzleyin | CVE-2025-66565İstismar yok | Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Valuesgofiber · utils · CWE-252 | Kritik9,3 | — | %0,5 | 9 Ara 2025 |
36İzleyin | CVE-2025-66630İstismar yok | Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failuregofiber · fiber · CWE-338 | Kritik9,2 | — | %0,5 | 9 Şub 2026 |
35İzleyin | CVE-2023-45128İstismar yok | CSRF Token Reuse Vulnerability in fibergofiber · fiber · CWE-20 | Yüksek8,8 | — | %0,3 | 16 Eki 2023 |
35İzleyin | CVE-2023-45141İstismar yok | CSRF Token Validation Vulnerability in fibergofiber · fiber · CWE-352 | Yüksek8,8 | — | %0,3 | 16 Eki 2023 |
34İzleyin | CVE-2025-54801İstismar yok | Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decodergofiber · fiber · CWE-789 | Yüksek8,7 | — | %0,4 | 5 Ağu 2025 |
30İzleyin | CVE-2026-25891İstismar yok | Fiber has an Arbitrary File Read in Static Middleware on Windowsgofiber · fiber · CWE-22 | Yüksek7,7 | — | %0,7 | 24 Şub 2026 |
30İzleyin | CVE-2026-25899İstismar yok | Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocationgofiber · fiber · CWE-789 | Yüksek7,5 | — | %0,6 | 24 Şub 2026 |
30İzleyin | CVE-2025-48075İstismar yok | Fiber panics when fiber.Ctx.BodyParser parses invalid range indexgofiber · fiber · CWE-129 | Yüksek7,7 | — | %0,5 | 22 May 2025 |
26İzleyin | CVE-2026-30246İstismar yok | github.com/gofiber/fiber/v3 cache middleware can mix responses across query parametersgofiber · fiber · CWE-436 | Orta6,5 | — | %0,4 | 5 May 2026 |
24İzleyin | CVE-2024-22199İstismar yok | Django Template Engine Vulnerable to XSSgofiber · django · CWE-20 | Orta6,1 | — | %0,5 | 11 Oca 2024 |
22İzleyin | CVE-2026-25882İstismar yok | Fiber has a Denial of Service Vulnerability via Route Parameter Overflowgofiber · fiber · CWE-129 | Orta5,5 | — | %0,8 | 24 Şub 2026 |
21İzleyin | CVE-2020-15111İstismar yok | CRLF vulnerability in Fibergofiber · fiber · CWE-74 | Orta5,4 | — | %0,9 | 20 Tem 2020 |
21İzleyin | CVE-2023-41338İstismar yok | Vulnerability in Ctx.IsFromLocal() in gofibergofiber · fiber · CWE-670 | Orta5,3 | — | %0,7 | 8 Eyl 2023 |
21İzleyin | CVE-2026-44332İstismar yok | Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizergofiber · fiber · CWE-203 | Orta5,3 | — | %0,5 | 8 Tem 2026 |
21İzleyin | CVE-2026-45045İstismar yok | Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForwardgofiber · fiber · CWE-290 | Orta5,3 | — | %0,5 | 8 Tem 2026 |
21İzleyin | CVE-2026-42554İstismar yok | Fiber: XSS in AutoFormat Content Negotiationgofiber · fiber · CWE-79 | Orta5,3 | — | %0,3 | 11 May 2026 |
19İzleyin | CVE-2026-53624İstismar yok | Fiber: HSTS header never set in helmet middleware due to incorrect protocol checkgofiber · fiber · CWE-319 | Orta4,8 | — | %0,2 | 8 Tem 2026 |
- CVE-2024-3851339İzleyin
Fiber Session Middleware Token Injection Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1gofiber · fiber1 Tem 2024
- CVE-2024-2512439İzleyin
Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials
KritikCVSS 9,8İstismar yokEPSS %1gofiber · fiber21 Şub 2024
- CVE-2025-6656537İzleyin
Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values
KritikCVSS 9,3İstismar yokEPSS %0gofiber · utils9 Ara 2025
- CVE-2025-6663036İzleyin
Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure
KritikCVSS 9,2İstismar yokEPSS %1gofiber · fiber9 Şub 2026
- CVE-2023-4512835İzleyin
CSRF Token Reuse Vulnerability in fiber
YüksekCVSS 8,8İstismar yokEPSS %0gofiber · fiber16 Eki 2023
- CVE-2023-4514135İzleyin
CSRF Token Validation Vulnerability in fiber
YüksekCVSS 8,8İstismar yokEPSS %0gofiber · fiber16 Eki 2023
- CVE-2025-5480134İzleyin
Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder
YüksekCVSS 8,7İstismar yokEPSS %0gofiber · fiber5 Ağu 2025
- CVE-2026-2589130İzleyin
Fiber has an Arbitrary File Read in Static Middleware on Windows
YüksekCVSS 7,7İstismar yokEPSS %1gofiber · fiber24 Şub 2026
- CVE-2026-2589930İzleyin
Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation
YüksekCVSS 7,5İstismar yokEPSS %1gofiber · fiber24 Şub 2026
- CVE-2025-4807530İzleyin
Fiber panics when fiber.Ctx.BodyParser parses invalid range index
YüksekCVSS 7,7İstismar yokEPSS %1gofiber · fiber22 May 2025
- CVE-2026-3024626İzleyin
github.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters
OrtaCVSS 6,5İstismar yokEPSS %0gofiber · fiber5 May 2026
- CVE-2024-2219924İzleyin
Django Template Engine Vulnerable to XSS
OrtaCVSS 6,1İstismar yokEPSS %0gofiber · django11 Oca 2024
- CVE-2026-2588222İzleyin
Fiber has a Denial of Service Vulnerability via Route Parameter Overflow
OrtaCVSS 5,5İstismar yokEPSS %1gofiber · fiber24 Şub 2026
- CVE-2020-1511121İzleyin
CRLF vulnerability in Fiber
OrtaCVSS 5,4İstismar yokEPSS %1gofiber · fiber20 Tem 2020
- CVE-2023-4133821İzleyin
Vulnerability in Ctx.IsFromLocal() in gofiber
OrtaCVSS 5,3İstismar yokEPSS %1gofiber · fiber8 Eyl 2023
- CVE-2026-4433221İzleyin
Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer
OrtaCVSS 5,3İstismar yokEPSS %1gofiber · fiber8 Tem 2026
- CVE-2026-4504521İzleyin
Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForward
OrtaCVSS 5,3İstismar yokEPSS %0gofiber · fiber8 Tem 2026
- CVE-2026-4255421İzleyin
Fiber: XSS in AutoFormat Content Negotiation
OrtaCVSS 5,3İstismar yokEPSS %0gofiber · fiber11 May 2026
- CVE-2026-5362419İzleyin
Fiber: HSTS header never set in helmet middleware due to incorrect protocol check
OrtaCVSS 4,8İstismar yokEPSS %0gofiber · fiber8 Tem 2026