github.com/gofiber/fiber/v2 vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-45045Mediumgithub.com/gofiber/fiber/v3: GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForward CVE-2026-42554Mediumgithub.com/gofiber/fiber/v3: Fiber vulnerable to XSS in AutoFormat Content Negotiation CVE-2026-25882Mediumgithub.com/gofiber/fiber/v2: Fiber has a Denial of Service Vulnerability via Route Parameter Overflow CVE-2025-66630Criticalgithub.com/gofiber/fiber/v2: Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure CVE-2025-54801Highgithub.com/gofiber/fiber/v2: Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder CVE-2025-48075Highgithub.com/gofiber/fiber/v2: Fiber panics when fiber.Ctx.BodyParser parses invalid range index CVE-2024-38513Criticalgithub.com/gofiber/fiber: Session Middleware Token Injection Vulnerability CVE-2024-25124Criticalgithub.com/gofiber/fiber/v2: Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials CVE-2023-45141Highgithub.com/gofiber/fiber/v2: Go Fiber CSRF Token Validation Vulnerability CVE-2023-45128Criticalgithub.com/gofiber/fiber/v2: CSRF Token Reuse Vulnerability CVE-2023-41338Mediumgithub.com/gofiber/fiber: Fiber unauthorized access vulnerability in `ctx.IsFromLocal()`CVE-2018-20744Mediumgithub.com/gofiber/fiber/v2: github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo