Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

fiber — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in fiber, with AI-generated Chinese analysis, references, and POCs.

Vendor: gofiber

CVE IDTitleCVSSSeverityPaused
CVE-2026-25899 Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation CWE-789 7.5 High2026-02-24
CVE-2026-25891 Fiber has an Arbitrary File Read in Static Middleware on Windows CWE-22 7.5AIHighAI2026-02-24
CVE-2026-25882 Fiber has a Denial of Service Vulnerability via Route Parameter Overflow CWE-129 7.5AIHighAI2026-02-24
CVE-2025-66630 Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure CWE-338 9.1AICriticalAI2026-02-09
CVE-2025-54801 Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder CWE-789 7.5AIHighAI2025-08-05
CVE-2025-48075 Fiber panics when fiber.Ctx.BodyParser parses invalid range index CWE-129 7.5AIHighAI2025-05-22
CVE-2024-38513 Fiber Session Middleware Token Injection Vulnerability CWE-384 10.0 Critical2024-07-01
CVE-2024-25124 Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials CWE-346 9.4 Critical2024-02-21
CVE-2023-45141 CSRF Token Validation Vulnerability in fiber CWE-352 8.6 High2023-10-16
CVE-2023-45128 CSRF Token Reuse Vulnerability in fiber CWE-20 10.0 Critical2023-10-16
CVE-2023-41338 Vulnerability in Ctx.IsFromLocal() in gofiber CWE-670 5.3 Medium2023-09-08
CVE-2020-15111 CRLF vulnerability in Fiber CWE-74 4.2 Medium2020-07-20

All 12 known CVE vulnerabilities affecting fiber with full Chinese analysis, references, and POCs where available.