Skip to content
OpenAdvisories

Package · Go

github.com/gofiber/fiber/v2

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2025-54801

    Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder

    Fiber is an Express inspired web framework written in Go. In versions 2.52.8 and below, when using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index (e.g., test.18446744073704), the application crashes due …

    gofiber fiber github.com/gofiber/fiber/v2 Go
  • High 7.7
    CVE-2025-48075

    Fiber panics when fiber.Ctx.BodyParser parses invalid range index

    Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, `fiber.Ctx.BodyParser` can map flat data to nested slices using `key[idx]value` syntax, but when idx is negative, it causes a panic instead of re…

    gofiber fiber github.com/gofiber/fiber/v2 github.com/gofiber/fiber Go
  • High 8.6
    CVE-2023-45141

    CSRF Token Validation Vulnerability in fiber

    Fiber is an express inspired web framework written in Go. A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the application, which allows an attacker to obtain tokens and forge malicious requests on behalf of a user. This can lead to un…

    gofiber fiber github.com/gofiber/fiber/v2 Go