Skip to content
OpenAdvisories

Vendor

gofiber

20 known vulnerabilities.

Products

fiber 18 utils 1 template 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.2
    CVE-2025-66630

    Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure

    Fiber is an Express inspired web framework written in Go. Before 2.52.11, on Go versions prior to 1.24, the underlying crypto/rand implementation can return an error if secure randomness cannot be obtained. Because no error is returned by the Fiber v2 UUID fu…

    gofiber fiber gatus github.com/gofiber/fiber/v2 Wolfi Go
  • Critical 9.3
    CVE-2025-66565

    Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

    Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator (crypto/rand) fails, both functions silently fall back to returning predictable UUID values, including…

    gofiber utils github.com/gofiber/utils github.com/gofiber/utils/v2 Go
  • Critical 10.0
    CVE-2024-38513

    Fiber Session Middleware Token Injection Vulnerability

    Fiber is an Express-inspired web framework written in Go A vulnerability present in versions prior to 2.52.5 is a session middleware issue in GoFiber versions 2 and above. This vulnerability allows users to supply their own session_id value, resulting in the …

    gofiber fiber github.com/gofiber/fiber/v2 github.com/gofiber/fiber Go
  • Critical 9.4
    CVE-2024-25124

    Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials

    Fiber is a web framework written in go. Prior to version 2.52.1, the CORS middleware allows for insecure configurations that could potentially expose the application to multiple CORS-related vulnerabilities. Specifically, it allows setting the Access-Control-…

    gofiber fiber github.com/gofiber/fiber/v2 Go
  • Critical 9.3
    CVE-2024-22199

    Django Template Engine Vulnerable to XSS

    This package provides universal methods to use multiple template engines with the Fiber web framework using the Views interface. This vulnerability specifically impacts web applications that render user-supplied data through this template engine, potentially …

    gofiber template github.com/gofiber/template/django/v3 Go
  • Critical 10.0
    CVE-2023-45128

    CSRF Token Reuse Vulnerability in fiber

    Fiber is an express inspired web framework written in Go. A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the application, which allows an attacker to inject arbitrary values and forge malicious requests on behalf of a user. This vuln…

    gofiber fiber github.com/gofiber/fiber/v2 Go