Start for Free
go

github.com/gofiber/fiber/v2

View on go registry
21 Total advisories
21 Vulnerabilities
0 Malware

Vulnerabilities

MEDIUM 5.3
Go

CVE-2026-45045

GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForward
UNKNOWN
Go

CVE-2026-42554

Fiber vulnerable to XSS in AutoFormat Content Negotiation
UNKNOWN
Go

CVE-2024-38513

Session Middleware Token Injection Vulnerability in github.com/gofiber/fiber
UNKNOWN
Go

CVE-2026-25882

Fiber has a Denial of Service Vulnerability via Route Parameter Overflow
UNKNOWN
Go

CVE-2026-25882

Fiber has a Denial of Service Vulnerability via Route Parameter Overflow in github.com/gofiber/fiber
UNKNOWN
Go

CVE-2025-66630

Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() on crypto/rand failure in github.com/gofiber/fiber
UNKNOWN
Go

CVE-2025-66630

Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure
UNKNOWN
Go

CVE-2025-54801

Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder
UNKNOWN
Go

CVE-2025-48075

Fiber panics when fiber.Ctx.BodyParser parses invalid range index
UNKNOWN
Go

CVE-2025-54801

Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder in github.com/gofiber/fiber
UNKNOWN
Go

CVE-2025-48075

Fiber panics when fiber.Ctx.BodyParser parses invalid range index in github.com/gofiber/fiber
CRITICAL 10.0
Go

CVE-2024-38513

Session Middleware Token Injection Vulnerability
MEDIUM 5.9
Go

CVE-2018-20744

github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error
UNKNOWN
Go

CVE-2024-25124

Insecure CORS Configuration allowing wildcard origin with credentials in github.com/gofiber/fiber/v2
CRITICAL 9.4
Go

CVE-2024-25124

Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials
UNKNOWN
Go

CVE-2023-45141

CSRF token validation vulnerability in github.com/gofiber/fiber/v2
UNKNOWN
Go

CVE-2023-45128

CSRF token reuse vulnerability in github.com/gofiber/fiber/v2
UNKNOWN
Go

CVE-2023-41338

IsFromLocal local address check can be circumvented in github.com/gofiber/fiber/v2
HIGH 8.8
Go

CVE-2023-45141

Go Fiber CSRF Token Validation Vulnerability
CRITICAL 9.6
Go

CVE-2023-45128

CSRF Token Reuse Vulnerability
MEDIUM 5.3
Go

CVE-2023-41338

Fiber unauthorized access vulnerability in `ctx.IsFromLocal()`

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes