Skip to content
OpenAdvisories

Package · Go

github.com/gofiber/fiber/v2

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.2
    CVE-2025-66630

    Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure

    Fiber is an Express inspired web framework written in Go. Before 2.52.11, on Go versions prior to 1.24, the underlying crypto/rand implementation can return an error if secure randomness cannot be obtained. Because no error is returned by the Fiber v2 UUID fu…

    gofiber fiber gatus github.com/gofiber/fiber/v2 Wolfi Go
  • Critical 10.0
    CVE-2024-38513

    Fiber Session Middleware Token Injection Vulnerability

    Fiber is an Express-inspired web framework written in Go A vulnerability present in versions prior to 2.52.5 is a session middleware issue in GoFiber versions 2 and above. This vulnerability allows users to supply their own session_id value, resulting in the …

    gofiber fiber github.com/gofiber/fiber/v2 github.com/gofiber/fiber Go
  • Critical 9.4
    CVE-2024-25124

    Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials

    Fiber is a web framework written in go. Prior to version 2.52.1, the CORS middleware allows for insecure configurations that could potentially expose the application to multiple CORS-related vulnerabilities. Specifically, it allows setting the Access-Control-…

    gofiber fiber github.com/gofiber/fiber/v2 Go
  • Critical 10.0
    CVE-2023-45128

    CSRF Token Reuse Vulnerability in fiber

    Fiber is an express inspired web framework written in Go. A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the application, which allows an attacker to inject arbitrary values and forge malicious requests on behalf of a user. This vuln…

    gofiber fiber github.com/gofiber/fiber/v2 Go