Skip to content
OpenAdvisories

Package · Go

github.com/gofiber/fiber

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2025-66630

    Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure

    Fiber is an Express inspired web framework written in Go. Before 2.52.11, on Go versions prior to 1.24, the underlying crypto/rand implementation can return an error if secure randomness cannot be obtained. Because no error is returned by the Fiber v2 UUID fu…

    gofiber fiber github.com/gofiber/fiber/v2 github.com/gofiber/fiber Go
  • Critical 10.0
    CVE-2024-38513

    Fiber Session Middleware Token Injection Vulnerability

    Fiber is an Express-inspired web framework written in Go A vulnerability present in versions prior to 2.52.5 is a session middleware issue in GoFiber versions 2 and above. This vulnerability allows users to supply their own session_id value, resulting in the …

    gofiber fiber github.com/gofiber/fiber/v2 github.com/gofiber/fiber Go